CVE-2024-28099

Summary

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.

Affected Software

VendorProductVersion RangeStatus
KEYENCE CORPORATIONVT STUDIOVer.8.32 and earlieraffected

Weaknesses

  • Uncontrolled Search Path Element

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References