Winstep

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Winstep records in CISA KEV

No Winstep vulnerabilities are listed in CISA KEV.

1 record

TI-2020-19387 CVE-2020-37253 · GHSA-vcqw-5625-54xg

HIGH 72

Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service that allows local attackers to escalate privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00157 Published 2026-06-19 No fix listed CWE-428