CVE-2026-28704 in Emocheck

الملخص

بحسب MITRE • 10/04/2026

Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: Jpcert
• حجز: 03/04/2026
• إفشاء: 10/04/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-356799
• CPE: جاهز
• CWE: CWE-427 (مؤكد)
• CVSS: 7.8 (CNA)
• EPSS: 0.00160
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-28704
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-28704
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-28704/