{"id":"CVE-2016-3958","aliases":["BELL-CVE-2016-3958","EUVD-2016-4967","GHSA-8w8c-fgc5-6f3r","GO-2021-0163"],"status":"published","title":"Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows...","description":"Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00396,"percentile":0.34099,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2016-05-23T19:00:00Z","modified":"2026-10-20T10:47:39Z","fixes":[{"ecosystem":"Go","package":"stdlib","fixed_in":["1.5.4","1.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.5.4"},{"introduced":"1.6.0-0"},{"fixed":"1.6.1"}]}]}],"products":[{"vendor":"golang","product":"go"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/04/05/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://groups.google.com/forum/#%21topic/golang-announce/9eqIHqaWvck","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://github.com/golang/go/issues/14959","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/05/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://go-review.googlesource.com/#/c/21428/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3958"},{"url":"https://groups.google.com/forum/#!topic/golang-announce/9eqIHqaWvck"},{"url":"https://go-review.googlesource.com/#/c/21428"},{"url":"https://github.com/advisories/GHSA-8w8c-fgc5-6f3r"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-3958","tags":["advisory"]},{"url":"https://go.dev/cl/21428","tags":["fix"]},{"url":"https://go.googlesource.com/go/+/6a0bb87bd0bf0fdf8ddbd35f77a75ebd412f61b0","tags":["fix"]},{"url":"https://go.dev/issue/14959","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/9eqIHqaWvck","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-3958","description":"Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.","status":"published","published":"2016-05-23T19:00:00Z","modified":"2024-08-06T00:10:31.969Z","updated_at":"2026-11-02T14:33:33.758954Z"}],"euvd":[{"id":"EUVD-2016-4967","description":"Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.","status":"published","published":"2016-05-23T19:00:00Z","modified":"2024-08-06T00:10:31Z","updated_at":"2026-11-03T02:22:48.690835Z"}],"ghsa":[{"id":"GHSA-8w8c-fgc5-6f3r","title":"Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows...","description":"Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.","status":"published","published":"2022-05-14T03:07:25Z","modified":"2025-04-12T13:01:30Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:01:28.050499Z"}],"nvd":[{"id":"CVE-2016-3958","description":"Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.","status":"published","published":"2016-05-23T19:59:03.353Z","modified":"2026-06-17T00:46:38.417Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:25.366449Z"}],"osv":[{"id":"BELL-CVE-2016-3958","title":"CVE-2016-3958 does not affect BellSoft software","status":"withdrawn","published":"2016-05-23T19:59:00Z","modified":"2026-01-26T09:48:46.227951Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2016-3958","description":"Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.","status":"published","published":"2016-05-23T19:59:03.353Z","modified":"2026-10-20T10:47:39.840108359Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"GO-2021-0163","title":"Privilege escalation on Windows via malicious DLL in syscall","description":"Untrusted search path vulnerability on Windows related to LoadLibrary allows local users to gain privileges via a malicious DLL in the current working directory.","status":"published","published":"2022-01-05T22:41:50Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.604718Z"}]}}