Vendors / Splashtop Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 9
Exploited now Splashtop records in CISA KEV No Splashtop vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Splashtop 8.71.12001.0 contains an unquoted service path vulnerability in the Splashtop Software Updater Service that allows local attackers to potentially execute arbitrary code.
CVSS 4.0 HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00199 · Published 2026-01-13 · No fix listed CWE-428
Priority LOW 35
The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00155 · Published 2024-07-28 · No fix listed CWE-276
Priority LOW 35
The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00155 · Published 2024-07-28 · No fix listed CWE-1391
Priority LOW 35
The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~nsu.tmp and copies itself to it as Au_.exe.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00179 · Published 2024-01-25 · Fixed in 1.5.6.21 CWE-379
Priority LOW 34
Splashtop Remote Client (Business Edition) through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00447 · Published 2022-02-15 · No fix listed CWE-668
Priority LOW 34
Splashtop Remote Client (Personal Edition) through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00302 · Published 2022-02-15 · No fix listed CWE-668
Priority LOW 34
Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00302 · Published 2022-02-15 · No fix listed CWE-668
Priority LOW 33
The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00213 · Published 2024-07-28 · No fix listed CWE-378
Priority LOW 32
The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation.
CVSS 3.1 HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0014 · Published 2024-07-28 · No fix listed CWE-269
Priority LOW 30
A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16.
CVSS 3.1 MEDIUM 6.6· Local · Low privileges · User interaction · EPSS 0.0055 · Published 2020-05-21 · No fix listed CWE-732
Open these records in search → All records by CVSS severity
0 9 1 0 0
THREATIST.IORead the docs