Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.
CVSS 3.0HIGH 7.8·Local·No auth·User interaction·EPSS 0.02594·Published 2017-06-09·Fixed in 0.5.3CWE-426