CVE-2026-25191 HIGH

CVE-2026-25191

Vendor Digital Arts Inc.
Product FinalCode Ver.5 series
Weakness CWE-427
Published February 26, 2026
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege.

Key dates

02Disclosure timeline

February 26, 2026 CVE published
February 26, 2026 Record updated