CVE-2025-0732 - Discord profapi.dll untrusted search path

Back Back to CVE browser

LOW

Discord profapi.dll untrusted search path

Published Jan 27, 2025

2.0

LOW

CVSS 4.0

EPSS 0.17%

Description

A vulnerability, which was classified as problematic, has been found in Discord up to 1.0.9177 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor n/a Product Discord Default
n/a
- Version
  1.0.9177
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Discord

n/a

Version	Status	Constraints
1.0.9177	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1840
Advisory
https://vuldb.com/?ctiid.293510
signaturepermissions-required
https://vuldb.com/?id.293510
vdb-entry
https://vuldb.com/?submit.481209
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1840		Advisory
https://vuldb.com/?ctiid.293510		signaturepermissions-required
https://vuldb.com/?id.293510		vdb-entry
https://vuldb.com/?submit.481209		third-party-advisory