What’s Vulnerable › Vulnerabilities

CVE-2026-32679

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-23 · updated 2026-10-26
• Weakness: CWE-427

Description

The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe) insecurely load Dynamic Link Libraries (DLLs). If a malicious DLL is placed at the same directory, the affected installer may load that DLL and execute its code with the privilege of the user invoking the installer.

Affected products

• Liveon Canonnwcamplugin.Exe: 1.0.0.0
• Liveon Canonnwcampluginforadmin.Exe: 1.0.0.0
• Liveon Downloader5Installer.Exe: 1.0.0.0
• Liveon Downloader5Installerforadmin.Exe: 1.0.0.0

References

• https://jvn.jp/en/jp/JVN45563482/
• https://web.liveon.ne.jp/wp-content/uploads/2026/04/JMSSA2026-001.pdf

Get alerted when CVE-2026-32679 or the next vulnerability affects your stack