QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-7676

Back to search

CVE-2025-7676

Published: Jul 28, 2025

Modified: Jul 28, 2025

PUBLISHED

Description

DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be loaded from the application directory. Fixed in release 24H2, but present in all earlier versions of Windows 11 for ARM CPUs.

VendorProductVersions

Microsoft, Inc

Windows 11

affected
0 - < 24H2

Weaknesses (CWE)

CWE-427

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now