CVE-2017-11657

CVE-2017-11657 describes a DLL hijacking vulnerability in Dashlane, allowing a local attacker to gain elevated privileges. By placing a malicious WINHTTP.dll file in the %APPDATA%\Dashlane directory, an attacker can execute arbitrary code with the privileges of the Dashlane application. This vulnerability has a CVSS score of 7.3 (High), indicating a significant impact on confidentiality, integrity, and availability, with low attack complexity requiring user interaction. While not actively exploited in the wild or on the CISA KEV catalog, public exploit code (EDB-44066) exists, though community discussion and media coverage are minimal.