CVE-2026-32679

CVE-2026-32679 is a DLL hijacking vulnerability affecting the installers of LiveOn Meet Client for Windows and Canon Network Camera Plugin. The vulnerable installers (Downloader5Installer.exe, Downloader5InstallerForAdmin.exe, CanonNWCamPlugin.exe, and CanonNWCamPluginForAdmin.exe) insecurely load dynamic link libraries, allowing an attacker to place a malicious DLL in the same directory and achieve code execution with user privileges. The vulnerability carries a CVSS score of 7.8 (HIGH) with a local attack vector requiring no privileges but user interaction to trigger. Successful exploitation results in complete compromise of confidentiality, integrity, and availability on the affected system. The attack complexity is low, indicating it can be executed reliably. Currently, CVE-2026-32679 shows no evidence of active exploitation in the wild. The vulnerability is not listed on CISA's Known Exploited Vulnerabilities catalog and remains inactive on threat intelligence hot lists. The EPSS score of 0.00014 indicates minimal probability of exploitation relative to other CVEs, suggesting this remains a low-priority threat from an operational standpoint.