Postman Untrusted Search Path Vulnerability in profapi.dll on Windows

A vulnerability leading to an untrusted search path has been identified in Postman versions prior to 11.20 on Windows. This issue arises in the library profapi.dll and requires local exploitation. The vulnerability has a high attack complexity, making it difficult to exploit.

Impact

Exploitation of this vulnerability could lead to local privilege escalation by allowing an attacker to manipulate the search path, potentially causing the application to load malicious libraries.