Vulnerability in Thermalright Tr-vision Home
CVE-2026-4255
A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading. The application loads certain dynamic-link library (DLL) dependencies using…
EPSS: 0.000 (0.7th percentile) — read the EPSS interpretation.
Affected products
- Thermalright Tr-vision Home — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2026-4255?
- CVE-2026-4255 is a vulnerability in Thermalright Tr-vision Home, classified under Inclusion of Functionality from Untrusted Control Sphere. Published 2026-03-16.
- Is CVE-2026-4255 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.