TI-2017-01511 CVE-2017-2221 · GHSA-mx2c-rq9j-c2gxUntrusted search path in Baidu Japan Inc. Installer of Baidu IMEPriority LOW 36Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0108 · Published 2017-08-04 · No fix listed CWE-426