CVE-2010-5226

CVE-2010-5226 describes multiple untrusted search path vulnerabilities in Autodesk Design Review 2011, allowing local privilege escalation. An attacker could place a malicious DLL (dwmapi.dll, whiptk_wt.7.12.601.dll, or xaml_wt.7.6.0.dll) in the same directory as a .dwf file, which the application would then load. This vulnerability has a CVSS score of 6.9, indicating high severity due to local access, medium attack complexity, and complete confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.