CyberSecBulletin

UPDF vulnerabilities

We track 3 vulnerabilities in UPDF products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2025.

3vulnerabilities
0critical
3high
0exploited
7.8average CVSS score

Latest UPDF vulnerabilities

  • 7.8 High severity

    UPDF: Uncontrolled Search Path Element

    CVE-2025-10215UPDF

    DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a FREngine.dll file of their choice in the 'C:\Users\Public\AppData\Local\UPDF\FREngine\Bin64

  • 7.8 High severity

    UPDF: Uncontrolled Search Path Element

    CVE-2025-10214UPDF

    DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a FREngine.dll file of their choice in the 'C:\Users\<user>\AppData\Local\UPDF\FREngine\Bin64

  • 7.8 High severity

    UPDF: Uncontrolled Search Path Element

    CVE-2025-10213UPDF

    DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users\<user>\AppData\Local\Microsoft\WindowsApps\'