Read the docs

Private Internet Access

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Private Internet Access records in CISA KEV

No Private Internet Access vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority LOW 39

The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00295 Published 2026-11-02 No fix listed CWE-287
Priority LOW 38

Private Internet Access 3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00216 Published 2026-01-13 No fix listed CWE-428
Open these records in search →