frostwire vulnerabilities and fixes

Q: How do I fix frostwire vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is frostwire being exploited right now?

None of the tracked frostwire CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which frostwire CVE should I patch first?

CVE-2018-1000828 currently ranks highest (54/100): FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in M.

Recent CVEs affecting frostwire, with upgrade or downgrade steps. 1 tracked.

frostwire has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-12-20. Highest priority: CVE-2018-1000828 (score 54/100).

CVE-2018-1000828 CRITICAL 9.0 DOWNGRADE FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in M

FAQ

How do I fix frostwire vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is frostwire being exploited right now?

None of the tracked frostwire CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which frostwire CVE should I patch first?

CVE-2018-1000828 currently ranks highest (54/100): FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in M.

← Back to latest CVEs