CVE-2011-1247

CVE-2011-1247 is an untrusted search path vulnerability in Microsoft Active Accessibility, affecting various versions of Windows XP, Vista, 7, and Server 2003/2008. This flaw allows a local attacker to achieve privilege escalation by tricking a legitimate application into loading a malicious DLL from the current working directory. With a CVSS score of 9.3, it is considered critical due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.