What’s Vulnerable › Vulnerabilities

CVE-2026-28704

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-10 · updated 2026-10-26
• Weakness: CWE-427

Description

Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck.

Affected products

• Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Emocheck: all versions

References

• https://github.com/JPCERTCC/EmoCheck/
• https://jvn.jp/en/jp/JVN00263243/
• https://www.jpcert.or.jp/press/2026/PR20260410.html

Get alerted when CVE-2026-28704 or the next vulnerability affects your stack