CVE-2026-3780 | BDVDB-2026-324072 Detail

Description#

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the legitimate system files, resulting in local privilege escalation.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-01Record published in the CVE List.
2. Version 22026-04-02Most recent update recorded in the CVE List.