CVE-2026-13133CWE-427

CVE-2026-13133

published August 10, 2026

CVSS
8.4
EPSS
0%
Percentile
5.8
In the wild
Unconfirmed
What it is

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy.

The record
Technical detail
CVSS
8.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.8th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-08-10T11:16Z
References (1)
https://line.github.io/security-advisory-blog/CVE-2026-13133/ · [email protected]
EPSS history
Timeline
  • 10 AUG 06:00Z
    A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a…
    cvelistv5