Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-03 | 2 | Disclosure2 |
| 2026-02-12 | 1 | Disclosure1 |
[ZDI-26-062|CVE-2025-65078] (Pwn2Own) Lexmark CX532adwe esfhelper Untrusted Search Path Local Privilege Escalation Vulnerability (CVSS 7.8; Credit: Interrupt Labs) https://www.zerodayinitiative.com/advisories/ZDI-26-062/
Post summary
A new local privilege escalation vulnerability (CVE‑2025‑65078) in Lexmark CX532adwe eshelper is disclosed with a CVSS score of 7.8, and a reference to a Zeroday advisory is provided.
CVE-2025-65078 An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an a… https://www.cve.org/CVERecord?id=CVE-2025-65078
Post summary
An untrusted search path vulnerability in Lexmark Embedded Solutions Framework has been reported; no PoC, exploit, or active usage is mentioned, and no patch information is provided.
🚨 CVE-2025-65078: Untrusted search path vulnerabil... Lexmark's untrusted search path flaw (CVE-2025-65078) enables DLL hijacking with zero user interaction - trivial remote... https://zerodaysignal.com/vulnerability/CVE-2025-65078 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces the discovery of CVE-2025-65078, an untrusted search path flaw in Lexmark that permits DLL hijacking with zero user interaction, and provides a link to a vulnerability page without detailing an exploit or patch.