CVE-2010-3159: Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a...

Security readout for executives and security teams

Explzh 5.67 and earlier has a local privilege-risk flaw caused by trusting the current working directory when locating an executable. An attacker needs local access or control of a folder the victim uses. There is no source-bundled evidence of internet-scale exploitation or CISA KEV listing. Exposure is likely limited to endpoints where Explzh 5.67 or earlier is installed, especially shared or multi-user systems where untrusted users can influence working directories. The source bundle does not identify broader affected products or platforms. Treat as a targeted endpoint hygiene issue, not an emergency based on the provided evidence. Prioritize discovery and upgrade or removal on shared workstations, administrator workstations, and systems where users handle untrusted files. Mitigation focus: Inventory systems for Explzh 5.67 or earlier.; Check JVN and vendor guidance for the supported fixed version.; Remove outdated Explzh installations where business use is not required..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.