PT-2025-31131 · Microsoft · Windows 11 For Arm64

CVE-2025-7676 · Publicado 2025-07-28 · Atualizado 2025-07-28

Positive Technologies (AI Summary)

CVSS v4.0

5.4

Média

Vetor base

AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Windows 11 for ARM64 CPU architecture versions prior to 24H2

Description This issue involves DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. An attacker can execute code by placing a malicious DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs from the application directory, which is not standard behavior.

Recommendations Update to Windows 11 version 24H2.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2025-7676

Produtos afetados

Windows 11 For Arm64

Referências · 5

• https://twitter.com/CVEnew/status/1949882534273438197 · Publicação no Twitter
• https://t.me/CVEtracker/28600 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-7676 · Nota de Segurança
• https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/refs/heads/main/2025-04.txt · Nota
• https://twitter.com/VulmonFeeds/status/1949890609902166485 · Publicação no Twitter