Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck.

Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck.

EmoCheck is a tool for detecting infections by "Emotet" malware, provided by Japan Computer Emergency Response Team Coordination Center (JPCERT/CC). EmoCheck loads Dynamic Link Libraries insecurely.<a href='https://cwe.mitre.org/data/definitions/427.html' target='_blank'></a><ul><li>Uncontrolled search path element (CWE-427) - CVE-2026-28704</li></ul>ryo shimada of Powder Keg Technologies, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated internally under Information Security Early Warning Partnership.