<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: private internet access</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2019-12572: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client 1.0.2 (build 02363) for Win</title><link>https://patchthecve.com/cve/CVE-2019-12572.html</link><guid>https://patchthecve.com/cve/CVE-2019-12572.html</guid><pubDate>Wed, 17 Jun 2026 02:14:53 +0000</pubDate><description>HIGH 7.8: A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client 1.0.2 (build 02363) for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service (pia-service.exe) loads the OpenSSL library from %PROGRA</description></item><item><title>CVE-2018-10190: A vulnerability in London Trust Media Private Internet Access (PIA) VPN Client v77 for Windows could allow an </title><link>https://patchthecve.com/cve/CVE-2018-10190.html</link><guid>https://patchthecve.com/cve/CVE-2018-10190.html</guid><pubDate>Wed, 17 Jun 2026 01:33:38 +0000</pubDate><description>HIGH 7.8: A vulnerability in London Trust Media Private Internet Access (PIA) VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The &quot;Changelog&quot; and &quot;Help&quot; optio</description></item><item><title>CVE-2017-15882: The London Trust Media Private Internet Access (PIA) application before 1.3.3.1 for Android allows remote atta</title><link>https://patchthecve.com/cve/CVE-2017-15882.html</link><guid>https://patchthecve.com/cve/CVE-2017-15882.html</guid><pubDate>Wed, 17 Jun 2026 01:08:25 +0000</pubDate><description>HIGH 7.5: The London Trust Media Private Internet Access (PIA) application before 1.3.3.1 for Android allows remote attackers to cause a denial of service (application crash) via a large VPN server-list file.</description></item></channel></rss>