{"id":"CVE-2026-26306","state":"PUBLISHED","title":"The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to execute arbitrary code with th","description":"The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to execute arbitrary code with the privileges of the user invoking the installer.","publishedAt":"2026-03-25T05:44:36.924Z","updatedAt":"2026-03-25T13:27:47.685Z","severity":{"score":8.4,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"jpcert"},"assigner":"jpcert","products":["OM Digital Solutions Corporation OM Workspace (Windows Edition)"],"affected":[{"vendor":"OM Digital Solutions Corporation","product":"OM Workspace (Windows Edition)","versions":[{"version":"Ver 2.4 and earlier","status":"affected"}]}],"references":["https://support.jp.omsystem.com/en/support/imsg/digicamera/info/omws.html","https://jvn.jp/en/jp/JVN19505323/"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/26xxx/CVE-2026-26306.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-26306","state":"PUBLISHED","datePublished":"2026-03-25T05:44:36.924Z","dateUpdated":"2026-03-25T13:27:47.685Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2026-03-12T02:02:31.345Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The installer for OM Workspace (Windows Edition) Ver 2.4 and earlier insecurely loads Dynamic Link Libraries (DLLs), which could allow an attacker to execute arbitrary code with the privileges of the user invoking the installer."}],"affected":[{"vendor":"OM Digital Solutions Corporation","product":"OM Workspace (Windows Edition)","versions":[{"version":"Ver 2.4 and earlier","status":"affected"}]}],"references":[{"url":"https://support.jp.omsystem.com/en/support/imsg/digicamera/info/omws.html"},{"url":"https://jvn.jp/en/jp/JVN19505323/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"HIGH","baseScore":8.4,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","description":"Uncontrolled Search Path Element","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2026-03-25T05:44:36.924Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-25T13:27:23.553201Z","id":"CVE-2026-26306","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-25T13:27:47.685Z"}}]}}}