PT-2026-34589 · Japan Media Systems · Canonnwcamplugin.Exe+3

Published 2026-04-23 · Updated 2026-04-23 · CVE-2026-32679

NVD

CVSS v3.1

7.8

High

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe) insecurely load Dynamic Link Libraries (DLLs). If a malicious DLL is placed at the same directory, the affected installer may load that DLL and execute its code with the privilege of the user invoking the installer.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-32679

Affected Products

Canonnwcamplugin.Exe

Canonnwcampluginforadmin.Exe

Downloader5Installer.Exe

Downloader5Installerforadmin.Exe

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-32679 · Security Note
• https://web.liveon.ne.jp/wp-content/uploads/2026/04/JMSSA2026-001.pdf · Note
• https://jvn.jp/en/jp/JVN45563482 · Note