Skip to content
OpenAdvisories
High · 7.3 CVE-2026-86938 EUVD-2026-85430GHSA-vqf5-hmj7-qj4q

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated admin…

Published Sep 23, 2026 · Updated Sep 24, 2026 · Assigned by apple

Description

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3.

Affected products

VendorProductAffectedFixed
Claris FileMaker Pro < 26.0.3 26.0.3

References