CVE-2026-33156

ScreenToGif is a screen recording tool. In versions from 2.42.1 and prior, ScreenToGif is vulnerable to DLL sideloading via version.dll . When the portable executable is run from a user-writable directory, it loads version.dll from the application directory instead of the Windows System32 directory, allowing arbitrary code execution in the user's context. This is especially impactful because ScreenToGif is primarily distributed as a portable application intended to be run from user-writable locations. At time of publication, there are no publicly available patches.

• CWE-426
• CWE-427

• https://github.com/NickeManarin/ScreenToGif/security/advisories/GHSA-3fmj-j696-9mg2Exploit, Vendor Advisory
• https://github.com/NickeManarin/ScreenToGif/security/advisories/GHSA-3fmj-j696-9mg2Exploit, Vendor Advisory

Published

Mar 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33150libfuse is the reference implementation of the Linux FUSE. F…7.8
• CVE-2026-33151Socket.IO is an open source, real-time, bidirectional, event…7.5
• CVE-2026-33152Tandoor Recipes is an application for managing recipes, plan…7.5
• CVE-2026-33153Tandoor Recipes is an application for managing recipes, plan…6.5
• CVE-2026-33154dynaconf is a configuration management tool for Python. Prio…8.1
• CVE-2026-33155DeepDiff is a project focused on Deep Difference and search …7.5
• CVE-2026-33157Craft CMS is a content management system (CMS). From version…7.2
• CVE-2026-33158Craft CMS is a content management system (CMS). From version…6.5
• CVE-2026-33159Craft CMS is a content management system (CMS). From version…6.5
• CVE-2026-33160Craft CMS is a content management system (CMS). From version…5.3
• CVE-2026-33161Craft CMS is a content management system (CMS). From version…4.3
• CVE-2026-33162Craft CMS is a content management system (CMS). From version…6.5