PatchTheCVEsplashtop vulnerabilities
Recent CVEs affecting splashtop products. 5 tracked.
splashtop has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-07-28. Highest priority: CVE-2024-42052 (score 30/100).
- CVE-2024-42053 HIGH 7.8 UPGRADE The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissi
- CVE-2024-42052 HIGH 7.8 UPGRADE The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissi
- CVE-2024-42051 HIGH 7.8 UPGRADE The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissi
- CVE-2024-42050 HIGH 7.0 UPGRADE The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissi
- CVE-2023-3181 HIGH 7.8 UPGRADE UPGRADE The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Wind
FAQ
How do I fix splashtop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is splashtop being exploited right now?
None of the tracked splashtop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which splashtop CVE should I patch first?
CVE-2024-42052 currently ranks highest (30/100): The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissi.