AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-41865

HIGH · CVSS 7.8 EPSS 0.34% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-08-14 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2024-41865
Severity
HIGH
CVSS
7.8
EPSS
0.34%

Original NVD Description

Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur if the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction.

Related CVEs

Other vulnerabilities affecting the same vendor(s)