CVE-2025-10213

Summary

DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users<user>\AppData\Local\Microsoft\WindowsApps' directory, which could lead to arbitrary code execution and persistence.

Affected Software

VendorProductVersion RangeStatus
UPDFUPDF1.8.5.0affected

Weaknesses

  • CWE-427: CWE-427 Uncontrolled Search Path Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References