Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect client. This...

PT-2021-2157 · Cisco · Cisco Anyconnect Secure Mobility Client

Name of the Vulnerable Software and Affected Versions: Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description: A vulnerability in the interprocess communication IPC channel could allow an authenticated, local attacker to perform a DLL hijacking attack on a...

CVE-2020-35145

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue...

CVE-2020-35145

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue...

Path traversal

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue...

CVE-2020-35145

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue...

CVE-2020-35145

CVE-2020-35145 affects Acronis True Image for Windows prior to 2021 Update 3, with a DLL hijacking (Untrusted Search Path) local privilege escalation in multiple components. Root cause: untrusted search path; impact: local privilege escalation. Affected versions are prior to 2021 Update 3. Mitiga...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-12678)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by an attacker to cause execution of arbitrary malicious code...

CVE-2021-25247

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

Design/Logic Flaw

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

CVE-2021-25247

Affected product: Trend Micro HouseCall for Home Networks (Windows Edition). Vulnerability: DLL hijacking/unsafe DLL loading due to DLL search path handling, enabling an attacker who already has local user privileges to escalate privileges and execute arbitrary code via a malicious DLL. Root caus...

CVE-2021-25247

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

Zhuhai Kingsoft Office Software Co., Ltd. Kingsoft PDF suffers from dll hijacking vulnerability

Kingsoft PDF is a powerful and easy-to-use PDF editor. Support one-click editing, quickly modify the content of PDF documents, and support PDF documents and docx/pptx/excel/txt/pictures and other document formats conversion. Ltd. Kingsoft PDF dll hijacking vulnerability, attackers can use the...

Flying Book (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-13582)

Flybook deeply integrates instant communication, calendar, audio/video conferencing, cloud documents, cloud disk, mailbox and workbench, and through the open and compatible platform, members can realize efficient communication and smooth collaboration in one place, and improve the efficiency of...

Ludmaster Classic suffers from a dll hijacking vulnerability (CNVD-2021-09954)

LU Master is a well-known free system tool software in China, providing free hardware authenticity identification, stability guarantee, system performance improvement, LU Master has hardware detection, hardware testing, system optimization, energy saving and cooling, driver installation, driver a...

Lumax Classic suffers from dll hijacking vulnerability (CNVD-2021-09953)

LU Master is a well-known free system tool software in China, providing free hardware authenticity identification, stability guarantee, system performance improvement, LU Master has hardware detection, hardware testing, system optimization, energy saving and cooling, driver installation, driver a...

CAJViewer suffers from dll hijacking vulnerability

CAJViewer is a literature reading software that supports TEB, CAJ, NH, KDH and PDF format files from China Journal Network. CAJViewer suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious DLL, execute malicious code, and gain control of the host...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10374)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10375)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10376)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...