CVE-2026-13133
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy.
Risk Assessment
An attacker could replace the DLL, potentially leading to arbitrary code execution during LINE installation.
Recommendation
Update LINE for Windows to version 26.4.0 or later that fixes the secure DLL search path.
Other vulnerabilities in LINE for Windows
Original NVD description (English source)
A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy.