CVE-2026-28704 | BDVDB-2026-326285 Detail
Japan Computer Emergency Response Team Coordination Center (JPCERT/CC)Emocheck
Description#
Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-427 Uncontrolled Search Path Element
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.