Punto Switcher
Approved changes feed: RSS · Atom
cpe:2.3:a:yandex:punto_switcher:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Yandex (694d67c2-958c-56da-ba5e-25307fedecef) |
|---|---|
| Product | Punto Switcher (549d20a0-b224-5d59-a7ae-de4b0a56a7d5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25865 |
vulnerable | 2026-07-29 00:34:57.728920 |
Punto Switcher 4.5.0.583 Unquoted Search Path via WinExec
HIGH (7.8)
Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call to WinExec without a fully qualified path for RunDll32.exe when invoking shell32.dll Control_RunDLL input.dll. Attackers can place a malicious executable earlier in the search order to achieve arbitrary code execution in the context of the affected user.
Published: 2026-06-18T19:39:14.489Z
Updated: 2026-06-22T17:16:33.279Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.