CVE-2025-71178

High

Description

Crucial Storage Executive installer versions prior to 11.08.082025.00 contain a DLL preloading vulnerability. During installation, the installer runs with elevated privileges and loads Windows DLLs using an uncontrolled search path, which can cause a malicious DLL placed alongside the installer to be loaded instead of the intended system library. A local attacker who can convince a victim to run the installer from a directory containing the attacker-supplied DLL can achieve arbitrary code execution with administrator privileges.

SeverityHigh

CVSS7.1

Exploit probability—

ProductCrucial Storage Executive

PublishedJan 26, 2026

First seenJan 26, 2026

Weakness typeCWE-427CWE-427

How to fix

Update

Micron Technology, Inc. Crucial Storage Executive11.08.082025.00 or later

Patches

eu.crucial.com/support/storage-executive

Affected products

Product	Affected versions	Fixed in
Micron Technology, Inc. Crucial Storage Executive	v < 11.08.082025.00	11.08.082025.00

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.