CVE-2023-47453

HIGH

Sohu Video Player 7.0.15.0 - Uncontrolled Search Path Element via version.dll

Title source: llm

Description

An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in the current working directory.

References (1)

Core 1

Core References

Exploit

https://github.com/xieqiang11/poc-2/tree/main

Scores

CVSS v3 7.8

EPSS 0.0032

EPSS Percentile 23.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-427

Status published

Products (1)

sohu/video_player 7.0.15.0

Published Nov 30, 2023

Tracked Since Feb 18, 2026