CVE-2026-23703: Digital Arts Inc Finalcode ver.5 Series

High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days.

The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permissions vulnerability. A non-administrative user may execute arbitrary code with SYSTEM privilege.

Affected products

• Digital Arts Inc Finalcode ver.5 Series: before 5.43R01 (fixed in 5.43R01)
• Digital Arts Inc Finalcode ver.6 Series: before 6.51R01 (fixed in 6.51R01)

Published 2026-02-26. Last modified 2026-06-17.