CVE-2026-28704General(jpcert / emocheck)

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch jpcert emocheck systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck.

jpcert CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://github.com/JPCERTCC/EmoCheck/

Weakness type (CWE)

CWE-427

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

emocheck

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-04-10); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

jpcert

Products

emocheck

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

General

250.0%

Disclosure

125.0%

Patch

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-10	2	Disclosure1Patch1
2026-04-11	1	General1
2026-06-08	1	General1

Full discourse4 posts

DailyCVE@dailycve123d
General
🔴 Emocheck (#Windows), Insecure DLL Loading, #CVE-2026-28704 (High) -DC-Jun2026-252 https://dailycve.com/emocheck-windows-insecure-dll-loading-cve-2026-28704-high-dc-jun2026-252/
Post summary
The post highlights CVE‑2026‑28704 as a high‑severity insecure DLL loading flaw affecting Windows, but offers no evidence of PoC, exploit, or mitigations.
0000030
210 followersView on X
CVEarity@CVEarity181d
General
⚡ New CVE Alert: CVE-2026-28704 📊 Severity: 7.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28704 #CVE-2026-28704 #CVE #High #CyberSecurity #InfoSec https://t.co/YEu5VQb8VI
Post summary
The tweet announces a new CVE-2026-28704 with a high severity rating but provides no technical details, exploit references, or patch information.
0000050
125 followersView on X
CVE@CVEnew182d
Disclosure
CVE-2026-28704 Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege o… https://www.cve.org/CVERecord?id=CVE-2026-28704
Post summary
The post announces CVE-2026-28704, describing a DLL injection flaw that allows arbitrary code execution via a crafted DLL placed in the same directory.
00000137
57.0K followersView on X
Giuseppe Paternicola@giuseppe_1337183d
Patch
🚨 HIGH: CVE-2026-28704 (CVSS 7.8) Emocheck DLL hijacking vulnerability allows arbitrary code execution when crafted DLL is placed in same directory. Requires user interaction. Mitigation: Verify DLL integrity before running Emocheck. #CVE #Vulnerability #PatchNow https://t.co/2CM4mzxM4a
Post summary
CVE‑2026‑28704 is a DLL hijacking vulnerability in Emocheck that can allow arbitrary code execution; while no formal vendor patch is cited, a practical mitigation is to verify DLL integrity before execution.
0000073
10 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	jpcert	emocheck	-	windows	-

Explore more

Back to dashboard jpcert CVEs emocheck vulnerabilities

What researchers are saying

CVE-2026-28704

Giuseppe Paternicola[verified]@giuseppe_1337Patch

CVE‑2026‑28704 is a DLL hijacking vulnerability in Emocheck that can allow arbitrary code execution; while no formal vendor patch is cited, a practical mitigation is to verify DLL integrity before execution.

DailyCVE@dailycveGeneral

The post highlights CVE‑2026‑28704 as a high‑severity insecure DLL loading flaw affecting Windows, but offers no evidence of PoC, exploit, or mitigations.

CVEarity@CVEarityGeneral

The tweet announces a new CVE-2026-28704 with a high severity rating but provides no technical details, exploit references, or patch information.

CVE@CVEnewDisclosure

The post announces CVE-2026-28704, describing a DLL injection flaw that allows arbitrary code execution via a crafted DLL placed in the same directory.