CVE-2023-31361

CVE-2023-31361 describes a DLL hijacking vulnerability in AMD AIM-T (Manageability Service) that could allow a local attacker with low privileges to escalate to arbitrary code execution. The connected sources confirm the affected component as AIM-T Manageability Service and attribute the issue to...

CVE-2024-21966

The CVE-2024-21966 issue is a DLL hijacking vulnerability in the AMD Ryzen Master Utility. The root cause is failure to prevent dynamic DLL loading, enabling a local attacker to escalate privileges and potentially achieve arbitrary code execution. AMD’s bulletin (amd-sb-9010) confirms the vulnera...

CVE-2024-21966

A DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21966

A DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

AMD Ryzen™ Master Utility DLL Hijacking Vulnerability

AMD ID: AMD-SB-9010 Potential Impact: Arbitrary Code Execution Severity: High Summary A researcher reported a DLL hijacking vulnerability within the AMD Ryzen™ Master Utility. AMD Ryzen™ Master Utility is a tool designed to unlock and customize the performance of AMD Ryzen™ processors. It can...

PT-2025-6385 · Amd · Amd Integrated Management Technology (Aim-T) Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Integrated Management Technology AIM-T Manageability Service affected versions not specified Description: A DLL hijacking issue in the Manageability Service could allow an attacker to achieve privilege escalation, potentially resulting in...

AIM-T Manageability Service Vulnerabilities

AMD ID: AMD-SB-9012 Potential Impact: Arbitrary Code Execution Severity: High Summary A researcher reported incorrect default permissions and Dynamic Link Library DLL hijacking vulnerabilities within AMD Integrated Management Technology AIM-T. AIM-T is designed to enable AMD Desktop and mobile...

CVE-2024-48091

Tally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL...

CVE-2024-57426

NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries...

CVE-2024-48091

Tally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL...

CVE-2024-48091

Tally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL...

CVE-2024-48091

CVE-2024-48091 affects Tally Prime Edit Log v2.1 due to a DLL hijacking flaw in the TextShaping.dll component. A crafted DLL can allow an attacker to execute arbitrary code, with a local attack vector and user interaction required. Connected advisories corroborate the vulnerability in Tally Prime...

CVE-2024-48091

Tally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL...

CVE-2024-57426

NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries...

Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking

Bogus websites advertising Google Chrome have been used to distribute malicious installers for a remote access trojan called ValleyRAT. The malware, first detected in 2023, is attributed to a threat actor tracked as Silver Fox, with prior attack campaigns primarily targeting Chinese-speaking...

CVE-2025-22894

Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a...

CVE-2025-22894

Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a...

CVE-2025-0069

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-3159

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process...