DLL Search Path Hijacking Vulnerability in UPDF for Windows
CVE-2025-10215

7HIGH

Key Information:

Vendor

UPDF

Status
UPDF
Vendor
CVE Published:
10 September 2025

What is CVE-2025-10215?

A DLL search path hijacking vulnerability exists in the UPDF.exe executable for Windows version 1.8.5.0. This vulnerability allows attackers with local access to the system to exploit the application's file searching behavior. By placing a malicious FREngine.dll file in the specified directory ('C:\Users\Public\AppData\Local\UPDF\FREngine\Bin64'), an attacker can execute arbitrary code, potentially leading to further system exploitation and maintaining persistence.

Affected Version(s)

UPDF 1.8.5.0

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alexander Huaman Jaimes
.
CVE-2025-10215 : DLL Search Path Hijacking Vulnerability in UPDF for Windows