The Installer For Rakuten Kobo Desktop Application Windows Version
Monthly
DLL hijacking in the Rakuten Kobo Desktop Application installer for Windows allows arbitrary code execution at the privilege level of the installing user. The installer performs an insecure DLL search, loading libraries from its own working directory before trusted system paths; if an attacker pre-positions a crafted DLL in that directory, execution is hijacked when the victim runs the installer. Reported by JPCERT and covered by a vendor security advisory; no public exploit code or CISA KEV listing identified at time of analysis.
DLL hijacking in the Rakuten Kobo Desktop Application installer for Windows allows arbitrary code execution at the privilege level of the installing user. The installer performs an insecure DLL search, loading libraries from its own working directory before trusted system paths; if an attacker pre-positions a crafted DLL in that directory, execution is hijacked when the victim runs the installer. Reported by JPCERT and covered by a vendor security advisory; no public exploit code or CISA KEV listing identified at time of analysis.