CVE-2011-1991

CVE-2011-1991 describes multiple untrusted search path vulnerabilities across various Microsoft Windows operating systems, including XP, Vista, Windows 7, and Server 2003/2008. These flaws allow a local attacker to elevate privileges by tricking legitimate applications into loading a malicious DLL from a user-controlled directory. With a CVSS score of 9.3, this vulnerability is critical, indicating a high potential for complete compromise of confidentiality, integrity, and availability. The attack complexity is medium, as it requires a user to open a crafted file (e.g., .doc, .rtf, .txt) in a directory containing the malicious DLL. Despite its high severity, there is no evidence of active exploitation (KEV: No), nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting it has not garnered significant attention from researchers or threat actors.