CVE-2026-86938

HIGH CVSS 7.3 View on NVD ↗

Description

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References

https://support.claris.com/s/answerview?anum=000049220&language=en_US

Published: Sep 23, 2026 18:17 UTC Modified: Sep 24, 2026 15:17 UTC