CVE-2015-8264

7.8 highEPSS 2.5%

Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2017-08-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

f-secure:f-secure_online_scanner

References

http://seclists.org/fulldisclosure/2016/Mar/64
http://www.securityfocus.com/archive/1/537803/100/0/threaded
http://www.securityfocus.com/bid/79657
https://www.f-secure.com/en/web/labs_global/fsc-2015-4
http://seclists.org/fulldisclosure/2016/Mar/64

Check your stack JSON