CVE-2025-0732

CVSS 3.1 Score 4.5 of 10 (medium)

Details

Published Jan 27, 2025
CWE ID 426

Summary

CVE-2025-0732 is a vulnerability identified in Discord up to version 1.0.9177 on Windows. Affecting an unknown functionality within the profapi.dll library, this issue allows for untrusted search paths, increasing the risk of malicious code execution. The attack requires local access and is considered complex, making exploitation a challenging task. Despite early disclosure, the vendor has not responded to the issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share