CVE-2010-3967: Microsoft Windows Movie Maker

High severity, CVSS 9.3. EPSS: 20.5% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading Vulnerability."

Affected products

• Microsoft Windows Movie Maker: version 2.6 only

Published 2010-12-16. Last modified 2026-06-16.