Untrusted Search Path Vulnerability in Discord for Windows

CVE-2025-0732

What is CVE-2025-0732?

A vulnerability exists in the Discord application for Windows, specifically related to an untrusted search path in the profapi.dll library. This design flaw can potentially allow malicious local users to influence the search path during execution, thereby leading to the execution of arbitrary or unintended code. Although this exploitation is technically complex and difficult to carry out, it presents significant risks if successfully executed. Despite early notification to the vendor regarding this issue, there has been no acknowledgment or response to address the vulnerability.

References