Vulnerabilities

TI-2026-20856 CVE-2026-25792

Greenshot Vulnerable to OS Command Injection via ExternalCommand Plugin

LOW 30

Greenshot is an open source Windows screenshot utility.

CVSS 3.1MEDIUM 6.5 Local High privileges User interaction EPSS 0.002 Published 2026-03-20 No fix listed CWE-426

TI-2026-17729 CVE-2026-22035

HIGH 69

Greenshot is an open source Windows screenshot utility.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01032 Published 2026-01-08 Fixed in 1.3.311 CWE-78

TI-2025-36692 CVE-2025-59050

HIGH 72

Greenshot is an open source Windows screenshot utility.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0029 Published 2025-09-16 Fixed in 1.3.301 CWE-502

TI-2023-17351 CVE-2023-34634 · GHSA-8743-hwvq-mj5j

MEDIUM 46

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.07551 Published 2023-08-01 No fix listed