High severity7.8NVD Advisory· Published Feb 13, 2019· Updated Jun 17, 2026

CVE-2018-16190

Description

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Micco/UNARJ32.DLL for Win32llm-create
Range: <=1.10.1.25
Micco/LHMelting for Win32llm-create
Range: <=1.65.3.6
Micco/LMLzh32.DLLllm-create
Range: <=2.67.1.2
Micco/Unarj32.dll For Win32, Lhmelting For Win32, And Lmlzh32.dllv5
Range: (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier)

Patches

Vulnerability mechanics

References

micco.mars.jp/vul/2017/mhsvi20170515_02.htmnvdPatchVendor Advisory
micco.mars.jp/vul/2017/mhsvi20170515_04.htmnvdPatchVendor Advisory
micco.mars.jp/vul/2017/mhsvi20170515_05.htmnvdPatchVendor Advisory
micco.mars.jp/vul/2017/mhsvi20170515_03.htmnvdPatchVendor Advisory
jvn.jp/en/jp/JVN52168232/index.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000