How severe is CVE-2025-0567?

This vulnerability has a severity rating of LOW with a CVSS score of 4.5 out of 10.

What type of vulnerability is CVE-2025-0567?

This is classified as CWE-426, which is a common weakness in software security.

CVE-2025-0567 - LOW Severity | CVSS 4.5

Vulnerability Description

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation appears to be difficult.

Related Vulnerabilities

CVE-2024-13524

LOW

CVSS:4.5(Medium)

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to unt...

CWE-4262024

CVE-2025-0732

LOW

CVSS:4.5(Medium)

A vulnerability, which was classified as problematic, has been found in Discord up to 1.0.9177 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll. The manipula...

CWE-4262025

CVE-2025-0733

LOW

CVSS:4.5(Medium)

A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search p...

CWE-4262025

CVE-2021-21562

MEDIUM

CVSS:4.4(Medium)

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE) and (ISI_PRIV_SYS_UPGRADE or ISI_PRIV_AU...

CWE-4262021

CVE-2025-0145

MEDIUM

CVSS:4.6(Medium)

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.

CWE-4262025

CVE-2023-29299

MEDIUM

CVSS:4.7(Medium)

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Untrusted Search Path vulnerability that could lead to Application denial-of-service. An atta...

CWE-4262023