Vulnerability record · CVE-2018-10027 · published 17 May 2018

CVE-2018-10027: Estsoft alzip untrusted search path vulnerability

Estsoft · Alzip

ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory: %PROGRAMFILES%\ESTsoft\ALZip\Formats, %PROGRAMFILES%\ESTsoft\ALZip\Coders, %PROGRAMFILES(X86)%\ESTsoft\ALZip\Formats, or %PROGRAMFILES(X86)%\ESTsoft\ALZip\Coders.

7.8 CVSS 3.0 High EPSS 0.43% · top 65.0% CWE-426 · Untrusted search path

7.8CVSS 3.0 base score, v2 4.6

0.43%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Alzip Estsoft

References

Link	Tags
https://pastebin.com/XHMeS7pQ	Third Party Advisory
https://www.altools.co.kr/Support/Notice_Contents.aspx?idx=1640&page=1&t=2	Release Notes
https://pastebin.com/XHMeS7pQ	Third Party Advisory
https://www.altools.co.kr/Support/Notice_Contents.aspx?idx=1640&page=1&t=2	Release Notes

Track CVE-2018-10027 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2011-1336Estsoft alzip memory buffer overflow vulnerabilityBuffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.EPSS 5.5%7 Jul 2011 7.8CVE-2019-12807Estsoft alzip memory buffer overflow vulnerabilityAlzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafte…EPSS 1.6%13 Aug 2019 7.8CVE-2018-5196Estsoft alzip out-of-bounds write vulnerabilityAlzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted …EPSS 1.4%21 Dec 2018 7.8CVE-2017-11323Estsoft alzip memory buffer overflow vulnerabilityStack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as …EPSS 3.0%19 Aug 2017 5.1CVE-2005-3194Estsoft alzip vulnerabilityMultiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code via a long…EPSS 3.1%14 Oct 2005 7.8CVE-2012-1854Microsoft Office VBE6.dll Untrusted Search Path Privilege EscalationVBE6.dll in Microsoft Office 2003 SP3, 2007 SP2/SP3, 2010 Gold/SP1, Microsoft VBA, and the Summit Microsoft VBA SDK loads a library from an untrusted…KEVEPSS 21%analysed10 Jul 2012 7.8CVE-2022-23748Audinate Dante mDNSResponder.exe DLL sideloading flawmDNSResponder.exe in Audinate's Dante Application Library improperly specifies how it loads a DLL, including the folder and conditions, allowing a ma…KEVEPSS 9.1%analysed17 Nov 2022 7.8CVE-2022-22047Windows CSRSS elevation of privilege via untrusted search pathCVE-2022-22047 is an elevation of privilege flaw in the Windows Client Server Run-time Subsystem (CSRSS), classified as CWE-426 (untrusted search pat…KEVEPSS 19%analysed12 Jul 2022

Source: NIST National Vulnerability Database (record CVE-2018-10027), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.