CVE-2016-3958

—

CVSS 3.1

7.8 high

EPSS

<1%p33

Published

May 23, 2016 (May 23, 2016)

Modified

Jun 17, 2026

Description

Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.

Vendors: golang
Products: go
Weakness: CWE-264
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.