CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Siemens Software Center DLL Hijacking Vulnerability (CVE-2026-110936) - Arbitrary Code Execution
[Affected Scope] All versions of Siemens Software Center prior to V4.0.9.8
[Impact] A local attacker can execute arbitrary code with the application's privileges by placing a malicious DLL in the search path
[Mitigation] Immediately upgrade to Siemens Software Center V4.0.9.8 or later
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Local Privilege Escalation (CVE-2020-3433)
[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.9.03015
[Impact] An authenticated local attacker can exploit the IPC channel to load a malicious DLL, leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
[Mitigation] Immediately upgrade all affected Windows endpoints to Cisco AnyConnect Secure Mobility Client version 4.9.03015 or later.
Cisco AnyConnect Secure Mobility Client for Windows Path Traversal Local Privilege Escalation (CVE-2020-3153) Security Advisory
[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions 4.8.01090 and prior
[Impact] An authenticated local attacker can copy arbitrary malicious DLL files to system-level directories, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately upgrade to the patched official release (version 4.8.02042 or later)
Microsoft Visio OLE DLL Side Loading Local Privilege Escalation Vulnerability (CVE-2016-3235, MS16-070)
[Affected Scope] Microsoft Visio 2007 SP3, 2010 SP2, 2013 SP1, 2016, and Visio Viewer 2007/2010
[Impact] Local attackers can execute arbitrary code and escalate privileges by tricking a user into opening a Visio file from a directory containing a malicious DLL
[Mitigation] Apply the official Microsoft MS16-070 security update and restrict insecure DLL search paths via registry modifications