VULNERABILITY INTELLIGENCE

CVE-2021-38469

CVSS score9.1 CRITICAL

EPSS probability0.63%

CISA KEVNot currently listed

Published2021-10-22

Last modified2026-06-17

Description

Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL.