CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Siemens Software Center DLL Hijacking Vulnerability (CVE-2026-110936) - Arbitrary Code Execution
[Affected Scope] All versions of Siemens Software Center prior to V4.0.9.8
[Impact] A local attacker can execute arbitrary code with the application's privileges by placing a malicious DLL in the search path
[Mitigation] Immediately upgrade to Siemens Software Center V4.0.9.8 or later
Kingsoft WPS Office promecefpluginhost.exe Improper Path Validation Remote Code Execution (CVE-2024-7262)
[Affected Scope] Kingsoft WPS Office on Windows, versions 12.2.0.13110 up to (but excluding) 12.2.0.16412
[Impact] An attacker can achieve arbitrary Windows library (DLL) loading and remote code execution (RCE) by tricking a user into opening a specially crafted spreadsheet document
[Mitigation] Immediately upgrade Kingsoft WPS Office to the patched version (12.2.0.16412 or higher) and restrict opening untrusted documents
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Local Privilege Escalation (CVE-2020-3433)
[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.9.03015
[Impact] An authenticated local attacker can exploit the IPC channel to load a malicious DLL, leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
[Mitigation] Immediately upgrade all affected Windows endpoints to Cisco AnyConnect Secure Mobility Client version 4.9.03015 or later.
Cisco AnyConnect Secure Mobility Client for Windows Path Traversal Local Privilege Escalation (CVE-2020-3153) Security Advisory
[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions 4.8.01090 and prior
[Impact] An authenticated local attacker can copy arbitrary malicious DLL files to system-level directories, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately upgrade to the patched official release (version 4.8.02042 or later)
Microsoft Office and VBA VBE6.dll Untrusted Search Path Vulnerability (CVE-2012-1854) Advisory
[Affected Scope] Microsoft Office 2003 SP3, 2007 SP2/SP3, 2010 Gold/SP1, and systems utilizing Visual Basic for Applications (VBA)
[Impact] Local attackers can execute arbitrary code and escalate privileges by tricking a user into opening a document in a directory containing a malicious DLL
[Mitigation] Apply the official Microsoft security update (MS12-046) and restrict insecure DLL loading via registry modifications