https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-18171.htmlhttps://patchthecve.com/cve/CVE-2020-18171.htmlWed, 17 Jun 2026 02:59:12 +0000HIGH 8.8: TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details.https://patchthecve.com/cve/CVE-2020-18169.htmlhttps://patchthecve.com/cve/CVE-2020-18169.htmlWed, 17 Jun 2026 02:59:12 +0000HIGH 7.8: A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details.https://patchthecve.com/cve/CVE-2020-11541.htmlhttps://patchthecve.com/cve/CVE-2020-11541.htmlWed, 17 Jun 2026 02:50:22 +0000MEDIUM 5.5: In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account.https://patchthecve.com/cve/CVE-2019-13382.htmlhttps://patchthecve.com/cve/CVE-2019-13382.htmlWed, 17 Jun 2026 02:16:40 +0000HIGH 7.8: UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder\InvalidPresentations that points to an arbitrary