CVE-2025-62776

N/A

Description

The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.

CVE Details

CVSS v3.1 ScoreN/A

Published10/29/2025

Last Modified10/30/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-427

References

https://jvn.jp/en/jp/JVN23394606/(vultures@jpcert.or.jp)

https://wtw.support/wtw/eagle-app-cms-win/(vultures@jpcert.or.jp)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.