CVE-2006-3438: Microsoft Hyperlink Object Library

High severity, CVSS 9.3. EPSS: 11.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."

Affected products

• Microsoft Hyperlink Object Library: any version

Published 2006-08-09. Last modified 2026-06-16.