CVE-2018-16190

—

CVSS 3.0

7.8 high

EPSS

<1%p59

Published

Feb 13, 2019 (Feb 13, 2019)

Modified

Jun 17, 2026

Description

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Vendors: micco
Products: lhmelting, lmlzh32.dll, unarj32.dll, unlha32.dll
Weakness: CWE-426
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.