Openedr vulnerabilities

2 known vulnerabilities in Openedr from Xcitium. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Openedr: Uncontrolled Search Path Element

  CVE-2025-69784Mar 16, 2026Xcitium

  A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to lo

• 7.8 High severity

  Openedr: Execution with Unnecessary Privileges

  CVE-2025-69783Mar 16, 2026Xcitium

  A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name (e.g., csrss.exe, edrsvc.exe, edrcon.exe). This allows unauthorized interaction with the OpenEDR kernel driver, granting acc