CVE-2025-7427CWE-427
Uncontrolled Search Path Element in Arm Development Studio before 2025
Medium · published July 22, 2025
What it is
Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00166 · 5.6th percentile
- Weakness
- CWE-427 · Uncontrolled Search Path Element
- Published
- 2025-07-22T09:52Z
EPSS history
Timeline