Lucene search
K

144 matches found

Talos Blog
Talos Blog
added 2026/01/22 1:54 p.m.6 views

Foxit, Epic Games Store, MedDreams vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed three vulnerabilities in Foxit PDF Editor, one in the Epic Games Store, and twenty-one in MedDream PACS. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco...

9.6CVSS5.8AI score0.00286EPSS
Exploits22
RedhatCVE
RedhatCVE
added 2026/01/16 3:28 p.m.5 views

CVE-2025-61973

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS6.9AI score0.00008EPSS
Exploits0References1
NVD
NVD
added 2026/01/15 4:16 p.m.2 views

CVE-2025-61973

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS0.00008EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/15 3:19 p.m.2 views

CVE-2025-61973

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS5.5AI score0.00008EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/15 3:19 p.m.25 views

CVE-2025-61973

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS0.00008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/15 3:19 p.m.2 views

CVE-2025-61973

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS6.5AI score0.00008EPSS
Exploits0References1
CVE
CVE
added 2026/01/15 3:19 p.m.12 views

CVE-2025-61973

CVE-2025-61973 is a local privilege escalation in the Epic Games Store installation via Microsoft Store. Cisco Talos details a DLL hijacking path: a writable %TEMP% directory allows replacing dxupdate.dll, which DXSETUP.exe later loads with SYSTEM privileges, yielding elevation. Affected versions...

8.8CVSS6.5AI score0.00008EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/15 3:19 p.m.3 views

EUVD-2026-2749

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS6.4AI score0.00008EPSS
Exploits0References3
Talos
Talos
added 2026/01/15 12:0 a.m.8 views

Epic Games Store Installation DLL Hijacking Privilege Escalation Vulnerability

Talos Vulnerability Report TALOS-2025-2279 Epic Games Store Installation DLL Hijacking Privilege Escalation Vulnerability January 15, 2026 CVE Number CVE-2025-61973 SUMMARY A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A...

8.8CVSS5.6AI score0.00008EPSS
Exploits0
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.2 views

Epic Games Store security vulnerabilities

Epic Games Store is an online gaming platform operated by Epic Games, a company based in the United States. There is a security vulnerability in Epic Games Store, which stems from the ability for low-privilege users to replace DLL files during the installation process, potentially leading to an...

8.8CVSS5.8AI score0.00008EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.4 views

PT-2026-3020

A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...

8.8CVSS6.9AI score0.00008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/23 7:34 p.m.4 views

CVE-2021-47739 Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service Path

Epic Games Easy Anti-Cheat 4.0 contains an unquoted service path vulnerability that allows local non-privileged users to execute arbitrary code with elevated system privileges. Attackers can exploit the service configuration by inserting malicious code in the system root path that would execute...

8.5CVSS7.2AI score0.00008EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.5 views

PT-2025-52839

Name of the Vulnerable Software and Affected Versions Epic Games Easy Anti-Cheat version 4.0 Description An unquoted service path exists in Epic Games Easy Anti-Cheat 4.0, potentially allowing local non-privileged users to execute arbitrary code with elevated system privileges. An attacker can...

8.5CVSS7.4AI score0.00008EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.2 views

Epic Games Easy Anti-Cheat 代码问题漏洞

Epic Games Easy Anti-Cheat is a game anti-cheat software from Epic Games, Inc. A code issue vulnerability exists in Epic Games Easy Anti-Cheat version 4.0, which stems from an unquoted service path that could lead to elevation of privilege...

8.5CVSS6.9AI score0.00008EPSS
Exploits1References5
OSV
OSV
added 2025/10/30 5:38 p.m.1 views

MAL-2025-49102 Malicious code in @epicgames/epic-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce90a948d900b570228227881b693a544dc9e70b0d9b2839283cc555136c3e3 The package @epicgames/epic-core was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/10/30 5:38 p.m.1 views

MAL-2025-49150 Malicious code in epic-games-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 171b5f79dcaf130369e4217640b310c4720b2ce20871c0f9387056defeb66fcd The package epic-games-footer was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/30 5:38 p.m.0 views

Malicious code in epic-games-nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2358b48b0499482e090fff386dcd3063342ed33d1a73ee900be5199e6bad00 The package epic-games-nav was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/10/30 5:38 p.m.0 views

MAL-2025-49151 Malicious code in epic-games-nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2358b48b0499482e090fff386dcd3063342ed33d1a73ee900be5199e6bad00 The package epic-games-nav was found to contain malicious code...

7AI score
Exploits0
EUVD
EUVD
added 2025/10/30 5:38 p.m.0 views

EUVD-2025-37143

Malicious code in epic-games-footer npm...

6.6AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/30 5:38 p.m.2 views

Malicious code in epic-games-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 171b5f79dcaf130369e4217640b310c4720b2ce20871c0f9387056defeb66fcd The package epic-games-footer was found to contain malicious code...

7AI score
Exploits0
Rows per page
Query Builder