Vendors / mtrojnar Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now mtrojnar records in CISA KEV No mtrojnar vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00501 · Published 2026-03-25 · No fix listed CWE-269
Priority LOW 36
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.003 · Published 2023-07-03 · No fix listed CWE-120
Priority LOW 35
osslsigncode is a tool that implements Authenticode signing and timestamping.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00166 · Published 2026-04-09 · Fixed in 2.12 CWE-121
Priority LOW 24
osslsigncode is a tool that implements Authenticode signing and timestamping.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00145 · Published 2026-04-09 · Fixed in 2.13 CWE-125
Priority LOW 24
osslsigncode is a tool that implements Authenticode signing and timestamping.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00145 · Published 2026-04-09 · Fixed in 2.13 CWE-125
Open these records in search → All records by CVSS severity
1 2 2 0 0
THREATIST.IORead the docs