CVE-2026-28704

HIGH

Emocheck - DLL Hijacking

Title source: llm

Description

Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck.

References (3)

https://www.jpcert.or.jp/press/2026/PR20260410.html

https://github.com/JPCERTCC/EmoCheck/

View Writeup ZIP pw:eip

https://jvn.jp/en/jp/JVN00263243/

Scores

CVSS v3 7.8

EPSS 0.0001

EPSS Percentile 2.6%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-427

Status published

Products (1)

Japan Computer Emergency Response Team Coordination Center (JPCERT/CC)/Emocheck all versions

Published Apr 10, 2026

Tracked Since Apr 10, 2026