CVE-2017-11742

CVE-2017-11742 describes a DLL hijacking vulnerability in the libexpat library, specifically affecting versions 2.2.1 and 2.2.2 on Windows. A local attacker can exploit this by placing a malicious ADVAPI32.DLL in the current working directory, leading to privilege escalation. The vulnerability carries a CVSSv3 score of 7.8 (High), indicating a low attack complexity and requiring only local user privileges, with potential for high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.