https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-25792.htmlhttps://patchthecve.com/cve/CVE-2026-25792.htmlWed, 17 Jun 2026 10:25:15 +0000MEDIUM 6.5: Greenshot is an open source Windows screenshot utility. Versions 1.3.312 and below have untrusted executable search path / binary hijacking vulnerability that allows a local attacker to execute arbitrary code when the affected Windows application launches explorer.exe without using an absolute path.https://patchthecve.com/cve/CVE-2026-22035.htmlhttps://patchthecve.com/cve/CVE-2026-22035.htmlWed, 17 Jun 2026 10:19:23 +0000HIGH 7.7: Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to OS Command Injection through unsanitized filename processing. The FormatArguments method in ExternalCommandDestination.cs:269 uses string.Format() to insert user-controlled filenames directly into shelhttps://patchthecve.com/cve/CVE-2025-59050.htmlhttps://patchthecve.com/cve/CVE-2025-59050.htmlMon, 19 Oct 2026 17:10:00 +0000HIGH 8.4: Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WM_COPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigger