Approved changes feed: RSS · Atom

cpe:2.3:a:anthropic:claude:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAnthropic (3238ad0c-ea15-566c-999a-9410b8abc1cf)
ProductClaude (3e6b2cfa-b8fc-52d2-b44d-3f64a2088da3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22561 vulnerable 2026-06-08 07:51:13.076602 Details available
Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling arbitrary code execution if a malicious DLL is planted alongside the installer.
Published: 2026-03-31T15:30:38.876Z
Updated: 2026-05-10T13:58:31.956Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.