KMSpico

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

KMSpico records in CISA KEV

No KMSpico vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2020-19070 CVE-2020-36935 · GHSA-hfxw-f658-9wgq

KMSpico 17.1.0.0 - 'Service KMSELDI' Unquoted Service Path

HIGH 72

KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configuration that allows local attackers to potentially execute arbitrary code.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00166 Published 2026-01-25 No fix listed CWE-428

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0