CVE-2017-10848

CVE-2017-10848 is an untrusted search path vulnerability affecting Installers for DocuWorks 8.0.7 and earlier, and DocuWorks Viewer Light published in July 2017 and earlier. This flaw allows an attacker to achieve privilege escalation by introducing a malicious DLL into an unspecified directory. With a CVSS score of 7.8 (High), successful exploitation requires user interaction and local access, but can lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.