CVE-2026-41447

Name of the Vulnerable Software and Affected Versions FirmaCheck for Windows versions prior to 1.3.16

Description A DLL hijacking issue exists where local attackers can execute arbitrary code. This occurs by placing a crafted openssl.cnf file in the unvalidated C:Program Files (x86)Common FilesSSL directory path. By writing a malicious OpenSSL configuration file that references an attacker-controlled DLL, code execution can be achieved at the startup process privilege level when FirmaCheck.exe runs automatically during system startup.

Recommendations Update FirmaCheck for Windows to version 1.3.16 or later.