CVE-2026-0487

The record

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impact on confidentiality, integrity and availability of the system.

Affected packages

Related vulnerabilities

• CVE-2026-62847 Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. CWE-427
• CVE-2026-116243 pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets… CWE-427
• CVE-2026-103665 The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may… CWE-427
• CVE-2026-104349 Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability… CWE-427
• CVE-2026-91093 A potential security vulnerability has been identified in HP One Agent for certain HP PC… CWE-427
• CVE-2026-92202 Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution… CWE-427
• CVE-2026-87530 Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows… CWE-427
• CVE-2026-76199 Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that… CWE-427