CyberSecBulletin

Blizzard vulnerabilities

We track 2 vulnerabilities in Blizzard products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 21, 2025.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest Blizzard vulnerabilities

  • 8.4 High severity

    Battle.net: Uncontrolled Search Path Element

    CVE-2025-27997Blizzard

    An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.

  • 7.0 High severity

    Battle.Net: Untrusted Search Path

    CVE-2025-1804Blizzard

    A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to