DLL Search Path Hijacking in UPDF for Windows

CVE-2025-10213

What is CVE-2025-10213?

The DLL search path hijacking vulnerability in UPDF.exe allows local attackers to exploit the system by inserting a malicious dxtn.dll file into the 'C:\Users<user>\AppData\Local\Microsoft\WindowsApps' directory. This exploitation can result in arbitrary code execution, enabling unauthorized control and potential persistence on the affected machine. Users are advised to review their security settings and implement necessary protections to mitigate risks associated with this vulnerability.

References