Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-92838

GeoVision GV-Remote E-Map dll hijacking vulnerability

CVSS 3.1 7.8 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-92838

Published

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location. If successfully exploited, an attacker with local write access to the affected directory could achieve arbitrary code execution in the security context of the GV-Remote E-Map process.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-92838

Published

GV-Remote E-map

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "GeoVision Inc.",
                    "product": "GV-Remote E-map",
                    "platforms": [
                        "Windows"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "V18.3.1"
                        },
                        {
                            "status": "unaffected",
                            "version": "V18.4"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON