Vulnerability · Published Apr 23, 2026 · Assigned by jpcert
CVE-2026-32679
High 7.8
In plain English
A high-severity uncontrolled search path in CanonNWCamPlugin.exe from Japan Media Systems Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe) insecurely load Dynamic Link Libraries (DLLs). If a malicious DLL is placed at the same directory, the affected installer may load that DLL and execute its code with the privilege of the user invoking the installer.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Japan Media Systems Corporation | Downloader5Installer.exe | Ver.1.0.0.0 |
| Japan Media Systems Corporation | Downloader5InstallerForAdmin.exe | Ver.1.0.0.0 |
| Japan Media Systems Corporation | CanonNWCamPlugin.exe | Ver.1.0.0.0 |
| Japan Media Systems Corporation | CanonNWCamPluginForAdmin.exe | Ver.1.0.0.0 |
Weakness: CWE-427 · Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H