It's the default search path for libraries which is well documented. (On the top of my head the function is LoadLibrary() on windows, see MSDN.)
The thing is, there was a random guy who considered that a security issue and he started posting vulnerability reports and asking for bounties on quite literally EVERY software existing on the planet. e.g. firefox, chrome, internet explorer, nsis, inno setup, and many popular open-source applications (because of course, EVERY software is affected since the 30 years windows and all other OS doing the exact same thing have existed).
It was a sort of epic scale hoax. (even though it's factually true that DLL are loaded from the current directory).
That will lead to a whole generation of people who will read the reports and be mislead into thinking that this was a major security failure discovery.
The thing is, there was a random guy who considered that a security issue and he started posting vulnerability reports and asking for bounties on quite literally EVERY software existing on the planet. e.g. firefox, chrome, internet explorer, nsis, inno setup, and many popular open-source applications (because of course, EVERY software is affected since the 30 years windows and all other OS doing the exact same thing have existed).
It was a sort of epic scale hoax. (even though it's factually true that DLL are loaded from the current directory).
That will lead to a whole generation of people who will read the reports and be mislead into thinking that this was a major security failure discovery.