Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create files.
CWE-427