CVE-2026-13133 — LY Corporation / LINE for Windows

CVE-2026-13133

LY Corporation / LINE for Windows PUBLISHED

Description (CNA)

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy.

Affected (CNA)

Vendor / product	Versions
LY Corporation / LINE for Windows	unaffected 26.4.0 before *

CWE

No CWE identifiers supplied.

References

https://line.github.io/security-advisory-blog/CVE-2026-13133/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.