Vendors / Voidtools Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Voidtools records in CISA KEV No Voidtools vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS).
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2023-04-12 · No fix listed CWE-1333
Priority LOW 35
voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00559 · Published 2020-08-21 · No fix listed
Priority LOW 29
HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01118 · Published 2021-07-14 · No fix listed CWE-644
Priority LOW 27
The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named pipe.
CVSS 4.0 MEDIUM 5.8· Local · Low privileges · No interaction · EPSS 0.00099 · Published 2025-11-04 · No fix listed CWE-269
Open these records in search → All records by CVSS severity
0 1 3 0 0
THREATIST.IORead the docs