Descriptions

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer’s directory to be loaded ahead of the legitimate System32 copy.

Severity

  • CVSSv4.0 Score: 8.4 (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)

Affected Versions

  • LINE for Windows before 26.4.0

Fix

  • LINE should be updated to latest version.

Reference

  • https://www.cve.org/CVERecord?id=CVE-2026-13133

Updated: