7.8
/ 10
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe) insecurely load Dynamic Link Libraries (DLLs). If a malicious DLL is placed at the same directory, the affected installer may load that DLL and execute its code with the privilege of the user invoking the installer.
Basic Information
ID
CVE-2026-32679
Source
jpcert
Published
Apr 23, 2026 at 00:02
Affected Product
Vendor
Japan Media Systems Corporation
Product
Downloader5Installer.exe
Version
Ver.1.0.0.0
Affected Versions
Japan Media Systems Corporation Downloader5Installer.exe Ver.1.0.0.0
Japan Media Systems Corporation Downloader5InstallerForAdmin.exe Ver.1.0.0.0
Japan Media Systems Corporation CanonNWCamPlugin.exe Ver.1.0.0.0
Japan Media Systems Corporation CanonNWCamPluginForAdmin.exe Ver.1.0.0.0
Japan Media Systems Corporation Downloader5InstallerForAdmin.exe Ver.1.0.0.0
Japan Media Systems Corporation CanonNWCamPlugin.exe Ver.1.0.0.0
Japan Media Systems Corporation CanonNWCamPluginForAdmin.exe Ver.1.0.0.0