Read the docs

Hotspot Shield

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Hotspot Shield records in CISA KEV

No Hotspot Shield vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2016-09236 CVE-2016-20060 · GHSA-j3qp-cj94-pmj3

Hotspot Shield 6.0.3 Unquoted Service Path Privilege Escalation

Priority HIGH 72

Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00154 Published 2026-04-04 No fix listed CWE-428
TI-2025-27178 CVE-2025-40710 · GHSA-vhmg-x9mc-q29w

Host Header Injection (HHI) in the Hotspot Shield VPN client

Priority LOW 12

Host Header Injection (HHI) vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnel.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00316 Published 2025-06-30 No fix listed CWE-74
Open these records in search →