CVE-2026-44612CWE-427

Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries

High · published May 13, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00181 · 7.3th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-05-13T05:44Z
EPSS history
Timeline
  • 13 MAY 05:44Z
    Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries
    cvelistv5