CVE-2017-2221

CVE-2017-2221 is an untrusted search path vulnerability affecting Baidu IME version 3.6.1.6 and earlier. An attacker can exploit this by placing a malicious DLL in an unspecified directory, leading to privilege escalation. This vulnerability has a CVSSv3 score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction, and potentially resulting in high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.