EUVD-2026-77216
GHSA-q5v2-gxj5-j2g5
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local vector since DLL must be pre-planted; no attacker privileges needed; user interaction required to run installer; full C/I/A impact at user privilege level.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
Lifecycle Timeline
4DescriptionCVE.org
The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privileges of the user who performed the installation.
AnalysisAI
DLL hijacking in the Rakuten Kobo Desktop Application installer for Windows allows arbitrary code execution at the privilege level of the installing user. The installer performs an insecure DLL search, loading libraries from its own working directory before trusted system paths; if an attacker pre-positions a crafted DLL in that directory, execution is hijacked when the victim runs the installer. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that a crafted DLL file matching a target library name be present in the same directory as the Kobo installer at the time the installer is executed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 8.4 (AV:L/AC:L/AT:N/PR:N/UI:A) reflects the realistic attack conditions: local attack vector, no required attacker privileges, but mandatory victim interaction (running the installer). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is to obtain and run only the updated installer from the official Kobo website, as directed by the vendor security advisory at https://help.kobo.com/hc/en-us/articles/42294089837463-Security-Advisory-Kobo-Desktop-App-Installer. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: communicate to internal stakeholders and users to defer Kobo application installation or updates until vendor releases a patch; document any currently installed instances for later verification. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-427 – Uncontrolled Search Path Element
View allShare
External POC / Exploit Code
Leaving vuln.today