PT-2025-20646 · Unknown+1 · Winsta.Dll+1

Shellkraft · Publicado 2025-05-10 · Atualizado 2025-09-28 · CVE-2025-4525

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Discord version 1.0.9188

Description A critical issue has been found in Discord, affecting some unknown functionality in the library WINSTA.dll. This issue leads to an uncontrolled search path. The attack must be approached locally and has a high complexity, making exploitation difficult. The exploit has been disclosed to the public.

Recommendations For Discord version 1.0.9188, consider restricting access to the WINSTA.dll library as a temporary mitigation measure until a patch is available.

Exploit

Correção

RCE

Untrusted Search Path

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-426

CWE-427

Identificadores relacionados

CVE-2025-4525

Produtos afetados

Discord

Winsta.Dll

Referências · 12

• 🔥 https://gist.github.com/shellkraft/ac4be6a3953e2889a7bf54aea2db88c2 · Exploit
• https://twitter.com/cracbot/status/1922970303640240522 · Publicação no Twitter
• https://vuldb.com/?submit.562788 · Nota
• https://twitter.com/CVEnew/status/1921337022964212147 · Publicação no Twitter
• https://vuldb.com/?id.308270 · Nota
• https://t.me/cvenotify/121658 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-4525 · Aviso do Fabricante
• https://vuldb.com/?ctiid.308270 · Nota
• https://twitter.com/grok/status/1948692549822284117 · Publicação no Twitter
• https://t.me/cvedetector/25031 · Publicação no Telegram
• https://t.me/cvetracker/23565 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-4525 · Nota de Segurança