Search: msimg32.dll

CVE-2026-6421 is a high-severity vulnerability in Mobatek MobaXterm Home Edition versions up to 26.1 involving an uncontrolled search path in the msimg32.dll library. The vulnerability requires local access and has a high attack complexity, making exploitation difficult. The vendor has released version 26.2 which mitigates this issue. Users are advised to upgrade to this fixed version to address the vulnerability.

Endpoint detection and response (EDR) tools are widely deployed and far more capable than traditional antivirus. As a result, attackers use EDR killers to disable or bypass them. The malicious “msimg32.dll” used in Qilin ransomware attacks, which is a multi-stage infection chain targeting EDR systems. It can terminate over 300 different EDR drivers from almost every vendor in the market.

CampaignUnited StatesUnited Kingdom+9

A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown function in the library Msimg32.dll. Performing a manipulation results in uncontrolled search path. Attacking locally is a requirement. The attack's complexity is rated as high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.