CVE-2025-0567
CVSS 3.1 Score 4.5 of 10 (medium)
Details
Published Jan 19, 2025
CWE ID 426
Summary
CVE-2025-0567 is a vulnerability discovered in Epic Games Launcher versions up to 17.2.1. Affecting the Installer component's profapi.dll library, this issue allows for manipulation of untrusted search paths. This exploit requires local access, and the complexity and difficulty of its execution are relatively high.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Epic Games Launcher
Affected Vendors
- Epic Games