https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-21957.htmlhttps://patchthecve.com/cve/CVE-2021-21957.htmlWed, 17 Jun 2026 03:36:25 +0000HIGH 7.3: A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability.https://patchthecve.com/cve/CVE-2020-13534.htmlhttps://patchthecve.com/cve/CVE-2020-13534.htmlWed, 17 Jun 2026 02:53:17 +0000HIGH 7.8: A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger https://patchthecve.com/cve/CVE-2020-13533.htmlhttps://patchthecve.com/cve/CVE-2020-13533.htmlWed, 17 Jun 2026 02:53:17 +0000HIGH 7.8: A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs inhttps://patchthecve.com/cve/CVE-2020-13532.htmlhttps://patchthecve.com/cve/CVE-2020-13532.htmlWed, 17 Jun 2026 02:53:17 +0000HIGH 7.8: A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability.