PT-2026-26676 · Unknown · Screentogif

Kwangyun · Published 2026-03-20 · Updated 2026-03-21 · CVE-2026-33156

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ScreenToGif versions prior to 2.42.1

Description ScreenToGif is susceptible to a DLL sideloading issue via the version.dll file. When the portable executable is launched from a directory writable by the user, it loads version.dll from the application directory instead of the standard Windows System32 directory. This allows for the execution of arbitrary code within the user's context. The application is commonly distributed as a portable application, making it frequently run from user-writable locations, which increases the risk.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Uncontrolled Search Path Element

Untrusted Search Path

Weakness Enumeration

CWE-427

CWE-426

Related Identifiers

CVE-2026-33156

GHSA-3FMJ-J696-9MG2

Affected Products

Screentogif

References · 6

• 🔥 https://github.com/NickeManarin/ScreenToGif/security/advisories/GHSA-3fmj-j696-9mg2 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33156.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-33156 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33156 · Security Note
• https://twitter.com/cyberbivash/status/2035112248637559183 · Twitter Post
• https://twitter.com/CVEnew/status/2035262153247056364 · Twitter Post