CVE-2010-3146

CVE-2010-3146 describes multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2, allowing local users to gain privileges by placing malicious mso.dll or GroovePerfmon.dll files in the current working directory, particularly when opening Groove vCard or Tool Archive files. This vulnerability carries a critical CVSS score of 9.3, indicating a network-exploitable attack with high impact on confidentiality, integrity, and availability, though it requires medium attack complexity. While not listed in CISA KEV, public exploit code exists on ExploitDB, but there is minimal community discussion or media coverage surrounding this decade-old vulnerability.