CVE-2012-0016

CVE-2012-0016 is an untrusted search path vulnerability affecting Microsoft Expression Design and its various versions. This flaw allows a local attacker to achieve privilege escalation by placing a malicious DLL in the same directory as a legitimate .xpr or .DESIGN file, which the application then loads. With a CVSS score of 9.3, this vulnerability is considered critical due to its potential for complete compromise of confidentiality, integrity, and availability. While no public exploits or active exploitation have been identified, its high EPSS and FAUCET risk scores indicate a significant potential threat.