What’s Vulnerable › Vulnerabilities

CVE-2023-22818: Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-15 · updated 2026-06-17
• Weakness: CWE-427

Description

Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code with the privileges of the vulnerable application or obtain a certain level of persistence on the compromised host.

Affected products

• SanDisk Security Installer for Windows: before 1.0.0.25 — fixed in 1.0.0.25

How to fix

Upgrade to a fixed version: SanDisk Security Installer for Windows 1.0.0.25. Check the vendor advisory for mitigations.

References

• https://www.westerndigital.com/support/product-security/wdc-23013-sandisk-security-installer-for-windows-1-0-0-25
• https://vuldb.com/?id.245601
• https://www.westerndigital.com/support/product-security/wdc-23013-sandisk-security-installer-for-windows-1-0-0-25

Get alerted when CVE-2023-22818 or the next vulnerability affects your stack