CVE-2025-54519

High

Published: 12 February 2026

Published

12 February 2026

Modified

15 April 2026

KEV Added

—

Patch

—

CVSS Score v3.1 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS Score 0.0012 2.2th percentile

Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2025-54519 is a high-severity Uncontrolled Search Path Element (CWE-427) vulnerability in Amd (inferred from references). Its CVSS base score is 7.3 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique DLL (T1574.001); ranked at the 2.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 CM-7 (Least Functionality) and SI-7 (Software, Firmware, and Information Integrity).

Deeper analysis

CVE-2025-54519 is a DLL hijacking vulnerability (CWE-427) in Doc Nav that could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. The vulnerability affects Doc Nav and was published on 2026-02-12 with a CVSS v3.1 base score of 7.3 (AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).

A local attacker with low privileges can exploit this vulnerability through low-complexity attack methods that require user interaction. Successful exploitation enables high-impact consequences, including unauthorized access to sensitive data, modification of system integrity, and disruption of availability, all within the original privilege context.

Mitigation details are provided in the AMD security bulletin AMD-SB-8013, available at https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8013.html.

OWASP Top 10 for Web (2025)

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2025-207246

Vulnerability details

A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

CWE(s): CWE-427

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1574.001 DLL Stealth

Adversaries may abuse dynamic-link library files (DLLs) in order to achieve persistence, escalate privileges, and evade defenses.

attack.mitre.org →

T1068 Exploitation for Privilege Escalation Privilege Escalation

Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.

attack.mitre.org →

Why these techniques?

CVE directly describes a DLL hijacking flaw (CWE-427) enabling local privilege escalation and arbitrary code execution, mapping to DLL Side-Loading and Exploitation for Privilege Escalation.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0