Which of the following is a reason environmental variables are a concern when reviewing potential system vulnerabilities?

Environmental variables store configuration information, paths, and other data that programs use. If an attacker exploits a vulnerability, the values within these variables can significantly influence the extent of the compromise. For example, a PATH variable that includes an insecure directory could allow an attacker to execute malicious code by placing a similarly named executable in that directory. Similarly, variables containing sensitive information (like API keys or database connection strings) could be exposed, increasing the impact of a data breach. In-memory environmental variable values can be overwritten, but this is typically part of a more complex exploit, not the primary concern. Environmental variables do not define cryptographic standards; that's handled by system libraries and configurations. They also do not determine when updates are run; that's managed by system update services.