HIGH

CVE-2026-13133

2026-08-10 CVSS v4.0

CVSS

8.4

Description

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy.

Weakness (CWE)

CWE-427 Uncontrolled Search Path (DLL Hijack)

EPSS Score

0.12%

Probability of exploitation in next 30 days

1.9th percentile

References

https://line.github.io/security-advisory-blog/CVE-2026-13133/

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE