CVE-2025-10198

Summary

Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories.

Affected Software

Weaknesses

• CWE-427 Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://www.kb.cert.org/vuls/id/974249

References

• https://github.com/LizardByte/Sunshine/pull/3971
• https://github.com/LizardByte/Sunshine/commit/9db11a906167bd962e57896223d7b9718058aeb2

• ←Previous
• Next→