Description


The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with administrative privileges.

Related CPE's


Could not find any relations

Weaknesses



CWE-427

CVSS impact metrics


CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 · High

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-29T12:17:08.980Z

18 hours ago

Last modified

2026-10-29T15:45:15.310Z

14 hours ago