Live › vulnerability › CVE-2026-103665
The Windows installer for Yamaha LAN Monitor loads dynamic link libraries from its own directory without checking them, so a crafted DLL placed there gets loaded. The malicious code then runs with administrative privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 12:24 UTC. All times on this page are UTC.
Anyone who runs the Yamaha LAN Monitor for Windows installer, Ver.1.9.3 or earlier, from a folder where an attacker could place a DLL (a downloads folder, a shared folder, or an unpacked ZIP from a third party). The DLL then runs with administrator rights. Machines where LAN Monitor is already installed and where the installer is never run again can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Yamaha LAN Monitor for Windows | vendor | <= 1.9.3 | 1.10.1 |
Use the Yamaha LAN Monitor for Windows installer Ver.1.10.1 or later, downloaded from Yamaha's official site.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with administrative privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-103665")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.