Read the docs

WinSparkle

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WinSparkle records in CISA KEV

No WinSparkle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

TI-2016-06587 CVE-2016-7838 · GHSA-v346-f4pj-p3j2

Untrusted search path in WinSparkle

Priority LOW 39

Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02594 Published 2017-06-09 Fixed in 0.5.3 CWE-426
Open these records in search →