CVE-2016-1281

CVE-2016-1281 describes an untrusted search path vulnerability in the installers for TrueCrypt 7.2/7.1a and VeraCrypt before 1.17-BETA. This flaw allows local attackers to execute arbitrary code with administrator privileges through DLL hijacking, specifically by placing a malicious DLL (e.g., USP10.dll) in the application directory. Rated 7.8 HIGH (CVSSv3), the vulnerability requires user interaction (UI:R) but can lead to full compromise (C:H/I:H/A:H) with low attack complexity (AC:L). There is no evidence of active exploitation, nor are public exploits like Metasploit or ExploitDB available, though it garnered some media attention and community discussion at the time of discovery.