CVE-2016-1281: Idrix Truecrypt

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application directory", as demonstrated with the USP10.dll, RichEd20.dll, NTMarta.dll and SRClient.dll DLLs.

Affected products

• Idrix Truecrypt: version 7.1 only; version 7.2 only
• Idrix Veracrypt: up to and including 1.16

Published 2017-01-23. Last modified 2026-06-17.