CVE-2026-13133

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy.

CVSS

No CVSS.

References

Link	Resource
https://line.github.io/security-advisory-blog/CVE-2026-13133/

Configurations

No configuration.

History

23 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Se ha identificado una vulnerabilidad en LineInst.exe (LINE para Windows) anterior a la versión 26.4.0, donde Msftedit.dll se carga a través de una ruta relativa sin una ruta de búsqueda de DLL segura, permitiendo que una DLL maliciosa colocada en el directorio del instalador se cargue antes que la copia legítima de System32.

Information

Published : 2026-08-10 07:16

Updated : 2026-10-23 20:10

NVD link : CVE-2026-13133

Mitre link : CVE-2026-13133

CVE.ORG link : CVE-2026-13133

JSON object : View

Products Affected

No product.

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2026-13133", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13133", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-10T18:01:46.381874Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "dl_cve@linecorp.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.4, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "dl_cve@linecorp.com", "affectedData": [{"vendor": "LY Corporation", "product": "LINE for Windows", "versions": [{"status": "unaffected", "version": "26.4.0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "affected"}]}], "published": "2026-08-10T07:16:46.173", "references": [{"url": "https://line.github.io/security-advisory-blog/CVE-2026-13133/", "source": "dl_cve@linecorp.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en LineInst.exe (LINE para Windows) anterior a la versi\u00f3n 26.4.0, donde Msftedit.dll se carga a trav\u00e9s de una ruta relativa sin una ruta de b\u00fasqueda de DLL segura, permitiendo que una DLL maliciosa colocada en el directorio del instalador se cargue antes que la copia leg\u00edtima de System32."}], "lastModified": "2026-10-23T20:10:00.160", "sourceIdentifier": "dl_cve@linecorp.com"}