CVE-2022-41796

CVE-2022-41796 is an untrusted search path vulnerability affecting the installer of Sony Content Transfer (for Windows) Ver.1.3 and prior. An attacker could exploit this by placing a malicious DLL in an unspecified directory, leading to privilege escalation. This vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.