A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading.
CVSS 4.0HIGH 8.4·Local·No auth·User interaction·EPSS 0.00198·Published 2026-03-16·Fixed in 2.0.5CWE-829