Security
Loading…

CVE-2026-86938

HIGHCVSS 7.3
View on NVD← Back to search
Description

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3.

Timeline
Published:September 23rd, 2026 6:17 PM
Last modified:October 5th, 2026 6:16 PM
CVSS Scoring

CVSS v3: 7.3 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Software
From NVD CPE configuration data

Vendors

claris

Products

filemaker_pro
Weaknesses (CWE)
CWE-639
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute