CVE-2010-3165: Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier,...

Security readout for executives and security teams

CVE-2010-3165 affects several older Japanese editor products. If a user runs one of these applications from an unsafe folder, a local attacker may be able to make the application run an attacker-controlled executable and gain privileges. The source bundle does not provide a CVSS score, confirmed exploitation, or a named patch. Exposure is most likely on workstations or administrative systems that still have the listed legacy editor versions installed. Risk increases when users open projects or launch the applications from shared, downloaded, removable, or otherwise user-writable directories. Treat this as a targeted legacy-software hygiene issue rather than an internet-wide emergency. Prioritize environments where these editors are used on privileged workstations, administrative jump boxes, or shared file workflows. Lack of severity scoring and patch detail limits certainty. Mitigation focus: Inventory systems for the listed affected editor products and versions.; Check JVN and vendor guidance for fixed versions or official workarounds.; Remove unsupported affected software where business use is no longer required..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.