{"id":"CVE-2025-0707","aliases":["EUVD-2025-1830","GHSA-h95h-q9r2-fmg8"],"status":"published","title":"Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path","description":"A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally.","severity":{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00193,"percentile":0.08992,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-426"],"published":"2025-01-24T20:00:15Z","modified":"2026-06-17T08:27:00Z","products":[{"vendor":"rise group","product":"rise mode temp cpu"}],"references":[{"url":"https://vuldb.com/?id.293235","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.293235","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.481088","tags":["third-party-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0707"},{"url":"https://github.com/advisories/GHSA-h95h-q9r2-fmg8"}],"sources":{"cve":[{"id":"CVE-2025-0707","title":"Rise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path","description":"A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally.","status":"published","published":"2025-01-24T20:00:15.448Z","modified":"2025-02-12T20:41:31.424Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"2.0","score":6.8,"vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","assessor":"cna"}],"cwes":["CWE-426"],"updated_at":"2026-11-02T14:32:53.81273Z"}],"euvd":[{"id":"EUVD-2025-1830","description":"A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally.","status":"published","published":"2025-01-24T20:00:15Z","modified":"2025-02-12T20:41:31Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-03T00:03:56.514594Z"}],"ghsa":[{"id":"GHSA-h95h-q9r2-fmg8","title":"A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as...","description":"A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally.","status":"published","published":"2025-01-24T21:31:28Z","modified":"2025-01-24T21:31:34Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-426"],"updated_at":"2026-11-02T14:59:40.658623Z"}],"nvd":[{"id":"CVE-2025-0707","description":"A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally.","status":"published","published":"2025-01-24T20:15:34.02Z","modified":"2026-06-17T08:27:00.847Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","level":"medium","assessor":"secondary"}],"cwes":["CWE-426"],"updated_at":"2026-11-02T14:10:49.483601Z"}]}}