CVE-2021-26807

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to…

published April 30, 2021

CVSS
—
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00480 · 40.5th percentile
Published
2021-04-30T10:53Z
EPSS history
Timeline
  • 30 APR 10:53Z
    GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to…
    cvelistv5