Blizzard Battle.Net Uncontrolled Search Path Vulnerability in profapi.dll

A critical vulnerability has been identified in Blizzard Battle.Net versions prior to 2.39.0.15212 on Windows. The issue arises from an unknown functionality in the library profapi.dll, leading to an uncontrolled search path. This vulnerability requires local exploitation, and while the attack complexity is high, the vendor has assessed the risk level as low.

Impact

Exploitation of this vulnerability could lead to a local privilege escalation, allowing an attacker to execute code with elevated rights.