CVE-2025-15558: Insecure Programdata Search Pathcve-2025-15558-insecure-programdata-search-path
Constructing executable or plugin search paths inside `C:\ProgramData` can lead to privilege escalation. Windows allows unprivileged users to create subdirectories inside `C:\ProgramData` by default. If a privileged process searches for an executable in a non-existent subdirectory of `ProgramData`, a low-privileged attacker can pre-create the directory and p