Vulnerabilities

TI-2026-71333 CVE-2026-41210

Moonlight Qt heap buffer overflow via crafted H.264 SPS seq_parameter_set_id

LOW 29

Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00307 Published 2026-10-12 Fixed in 6.2.0 CWE-787

TI-2023-22892 CVE-2023-42801

LOW 35

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00936 Published 2023-12-14 No fix listed CWE-120

TI-2023-22891 CVE-2023-42800

HIGH 73

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01881 Published 2023-12-14 Fixed in 24750d4b748fefa03d09fcfd6d45056faca354e0 CWE-120

TI-2023-22890 CVE-2023-42799

HIGH 73

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01881 Published 2023-12-14 Fixed in 02b7742f4d19631024bd766bd2bb76715780004e CWE-120

TI-2020-08898 CVE-2020-11024

LOW 37

In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00802 Published 2020-04-29 Fixed in 4.0.1 CWE-300