Crucial Storage Executive DLL Preloading Vulnerability Allowing Arbitrary Code Execution

A DLL preloading vulnerability has been identified in the Crucial Storage Executive installer, affecting versions prior to 11.08.082025.00. The vulnerability arises because the installer, which runs with elevated privileges, loads Windows DLLs using an uncontrolled search path. This flaw can be exploited by placing a malicious DLL in the same directory as the installer, leading to arbitrary code execution with administrator privileges. The issue requires local access to the victim's machine.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with administrator privileges.