Approved changes feed: RSS · Atom

cpe:2.3:a:updf:updf:1.8.5.0:*:*:*:*:windows:*:*

part: a version: 1.8.5.0 update: *

VendorUpdf (9b8070d0-70ef-5c16-8709-f662bb970fe7)
ProductUpdf (59ba963a-e64f-5f3e-a750-70a1e7908d1b)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10215 vulnerable 2026-06-08 07:02:26.458269 DLL search path hijacking vulnerability
DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a FREngine.dll file of their choice in the 'C:\Users\Public\AppData\Local\UPDF\FREngine\Bin64\' directory, which could lead to arbitrary code execution and persistence.
Published: 2025-09-10T11:39:30.395Z
Updated: 2025-09-10T20:22:06.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10214 vulnerable 2026-06-08 07:02:26.457816 DLL search path hijacking vulnerability
DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a FREngine.dll file of their choice in the 'C:\Users\<user>\AppData\Local\UPDF\FREngine\Bin64\' directory, which could lead to arbitrary code execution and persistence.
Published: 2025-09-10T11:39:12.641Z
Updated: 2025-09-10T20:22:38.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10213 vulnerable 2026-06-08 07:02:26.457299 DLL search path hijacking vulnerability
DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users\<user>\AppData\Local\Microsoft\WindowsApps\' directory, which could lead to arbitrary code execution and persistence.
Published: 2025-09-10T11:38:37.847Z
Updated: 2025-09-10T20:23:13.325Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.