What’s Vulnerable › Vulnerabilities

CVE-2026-23703

• Severity: high (CVSS 8.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-26 · updated 2026-06-17
• Weakness: CWE-276

Description

The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permissions vulnerability. A non-administrative user may execute arbitrary code with SYSTEM privilege.

Affected products

• Digital Arts Inc. FinalCode Ver.5 series: before 5.43R01
• Digital Arts Inc. FinalCode Ver.6 series: before 6.51R01

References

• https://jvn.jp/en/jp/JVN48498976/
• https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260226_01.pdf

Get alerted when CVE-2026-23703 or the next vulnerability affects your stack