Filtered by vendor Blizzard Subscriptions
Filtered by product Battle.net Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-1804 1 Blizzard 1 Battle.net 2025-07-13 7 High
A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor assigns this issue a low risk level.
CVE-2025-27997 1 Blizzard 1 Battle.net 2025-06-03 8.4 High
An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.
CVE-2020-27383 1 Blizzard 1 Battle.net 2024-11-21 7.8 High
Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice. The vulnerability exist due to weak set of permissions being granted to the "Authenticated Users Group" which grants the (F) Flag aka "Full Control"