What is CVE-2025-0567?

CVE-2025-0567 is a medium-severity vulnerability in Epic Games Launcher, classified under Untrusted Search Path. CVSS score: 4.5/10. Published 2025-01-19.

How severe is CVE-2025-0567?

Medium severity. CVSS v3 base score is 4.5 out of 10.

Vulnerability in Epic Games Launcher

CVE-2025-0567

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation appears to be difficult.

EPSS: 0.002 (9.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.5 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Epic Games Launcher — versions 17.2.0, 17.2.1

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)

Frequently asked questions

What is CVE-2025-0567?: CVE-2025-0567 is a medium-severity vulnerability in Epic Games Launcher, classified under Untrusted Search Path. CVSS score: 4.5/10. Published 2025-01-19.
How severe is CVE-2025-0567?: Medium severity. CVSS v3 base score is 4.5 out of 10.