CVE-2024-24916CWE-427

DLL-HiJacking

Medium · published June 19, 2025

CVSS v3.1
6.5
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02736 · 86.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-06-19T13:17Z
EPSS history
Timeline
  • 19 JUN 13:17Z
    DLL-HiJacking
    cvelistv5