CVE-2018-16190: Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32...

Security readout for executives and security teams

This CVE affects older Windows compression-related components from Micco. If an attacker can place a malicious DLL where the software searches first, the program may load it and give the attacker the program's privileges. The sources do not provide a CVSS score or confirmed exploitation evidence. Exposure is most likely on legacy Windows hosts or applications that still bundle or call these Micco DLLs. Internet-facing exposure is not established by the sources; risk depends on local file placement opportunities and the privileges of the process loading the DLL. Prioritize discovery in legacy Windows environments, especially where these components run in privileged business workflows. Without exploit confirmation or severity scoring, this is not an emergency from the provided evidence, but it is a practical hardening and legacy software cleanup item. Mitigation focus: Inventory systems and applications for the affected DLL names and versions.; Check JVN and Micco advisories for vendor-confirmed updates or workarounds.; Remove or replace obsolete copies where business use is no longer required..

Prepared

Jun 6, 2026, 21:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.