CVE-2026-13133

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-13133", "assignerOrgId": "657f3255-0560-4aed-82e4-7f579ec6acfb", "state": "PUBLISHED", "assignerShortName": "LY-Corporation", "dateReserved": "2026-06-24T06:46:44.264Z", "datePublished": "2026-08-10T06:00:12.020Z", "dateUpdated": "2026-08-10T18:02:03.340Z"}, "containers": {"cna": {"affected": [{"vendor": "LY Corporation", "product": "LINE for Windows", "defaultStatus": "affected", "versions": [{"version": "26.4.0", "status": "unaffected", "versionType": "custom", "lessThan": "*"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy."}], "references": [{"url": "https://line.github.io/security-advisory-blog/CVE-2026-13133/"}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.4, "baseSeverity": "HIGH"}}], "providerMetadata": {"orgId": "657f3255-0560-4aed-82e4-7f579ec6acfb", "shortName": "LY-Corporation", "dateUpdated": "2026-08-10T06:00:12.020Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-427", "lang": "en", "description": "CWE-427 Uncontrolled Search Path Element"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-10T18:01:46.381874Z", "id": "CVE-2026-13133", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-10T18:02:03.340Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-13133", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-10T18:01:46.381874Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-10T18:01:58.664Z"}}], "cna": {"metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.4, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "affected": [{"vendor": "LY Corporation", "product": "LINE for Windows", "versions": [{"status": "unaffected", "version": "26.4.0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "affected"}], "references": [{"url": "https://line.github.io/security-advisory-blog/CVE-2026-13133/"}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-427"}]}], "providerMetadata": {"orgId": "657f3255-0560-4aed-82e4-7f579ec6acfb", "shortName": "LY-Corporation", "dateUpdated": "2026-08-10T06:00:12.020Z"}}}, "cveMetadata": {"cveId": "CVE-2026-13133", "state": "PUBLISHED", "dateUpdated": "2026-08-10T18:02:03.340Z", "dateReserved": "2026-06-24T06:46:44.264Z", "assignerOrgId": "657f3255-0560-4aed-82e4-7f579ec6acfb", "datePublished": "2026-08-10T06:00:12.020Z", "assignerShortName": "LY-Corporation"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "LINE for Windows", "vendor": "LY Corporation", "versions": [{"lessThan": "*", "status": "unaffected", "version": "26.4.0", "versionType": "custom"}]}], "source": "dl_cve@linecorp.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en LineInst.exe (LINE para Windows) anterior a la versi\u00f3n 26.4.0, donde Msftedit.dll se carga a trav\u00e9s de una ruta relativa sin una ruta de b\u00fasqueda de DLL segura, permitiendo que una DLL maliciosa colocada en el directorio del instalador se cargue antes que la copia leg\u00edtima de System32."}], "id": "CVE-2026-13133", "lastModified": "2026-10-23T20:10:00.160", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "dl_cve@linecorp.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13133", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-10T18:01:46.381874Z", "version": "2.0.3"}}]}, "published": "2026-08-10T07:16:46.173", "references": [{"source": "dl_cve@linecorp.com", "url": "https://line.github.io/security-advisory-blog/CVE-2026-13133/"}], "sourceIdentifier": "dl_cve@linecorp.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[26.4.0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "line_for_windows", "vendor": "ly_corporation"}], "created": "2026-08-10T07:45:03.606407+00:00", "title": "DLL Hijacking via Unsecure Msftedit.dll Loading in LINE for Windows", "updated": "2026-08-11T14:26:11.299008+00:00", "vendors": ["ly_corporation", "ly_corporation$PRODUCT$line_for_windows"]}