CVE-2022-47636

Summary

CVE-2022-47636 is a newly identified DLL hijacking vulnerability affecting OutSystems Service Studio 11 11.53.30 build 61739. The flaw allows an attacker to execute arbitrary code by providing a maliciously crafted DLL, specifically av_libGLESv2.dll, libcef.DLL, user32.dll, or d3d10warp.dll, which are loaded when a user opens a .oml file. By exploiting this vulnerability, an adversary can gain the same privileges as the current logged-in user, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.