CVE-2026-21427
- State
- Published
- Severity
- 8.5 High
- Published
- Jan 8, 2026
- Updated
- Jan 22, 2026
- Reserved
- Dec 25, 2025
Description
The installers for multiple products provided by PIONEER CORPORATION contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running installer.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | jpcert |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | jpcert |
Weaknesses
- CWE-427 Uncontrolled Search Path Element
Affected Products
| Product | Versions |
|---|---|
USB DAC Amplifier APS-DA101JSPIONEER CORPORATION |
|
USB DAC Amplifier APS-DA101JRPIONEER CORPORATION |
|
USB DAC Amplifier APS-DA101JGLPIONEER CORPORATION |
|
USB DAC Amplifier APS-DA101JGRPIONEER CORPORATION |
|
Stellanova Lite APS-S201JSPIONEER CORPORATION |
|
Stellanova Lite APS-S201JRPIONEER CORPORATION |
|
Stellanova Lite APS-S201JGLPIONEER CORPORATION |
|
Stellanova Lite APS-S201JGRPIONEER CORPORATION |
|
Stellanova Limited APS-S202J-LMPIONEER CORPORATION |
|
Stellanova APS-S301 seriesPIONEER CORPORATION |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.