CVE-2026-103665: High severity Yamaha LAN Monitor for Windows vulnerability
Published Oct 29, 2026
·Updated
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with administrative privileges.
Affected Software
1 affected component
Yamaha LAN Monitor for Windows
Event History
Oct 29, 2026
CVE Published
via MITRE·11:33 AM
Data Sourced
via MITRE·11:33 AM
DescriptionSeverity
Frequently Asked Questions
1
Can an attacker exploit this remotely or without a user launching the installer?
No. The attack requires local conditions and user interaction: the installer must be launched from a directory containing the attacker’s crafted DLL.
2
Does the attacker need an existing user account or privileges on the system?
No privileges are required according to the reported vector. However, the attacker must be able to place a specially crafted DLL in the directory from which the installer is run.
3
What level of access could successful exploitation provide?
Successful exploitation can result in arbitrary code execution with administrative privileges.