CVE-2017-6189: Amazon Kindle For Pc

High severity, CVSS 7.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer.

Affected products

• Amazon Kindle For Pc: up to and including 1.17.44183

Published 2017-03-15. Last modified 2026-06-17.