https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-42053.htmlhttps://patchthecve.com/cve/CVE-2024-42053.htmlWed, 17 Jun 2026 07:48:42 +0000HIGH 7.8: The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a version.dll file in the folder.https://patchthecve.com/cve/CVE-2024-42052.htmlhttps://patchthecve.com/cve/CVE-2024-42052.htmlWed, 17 Jun 2026 07:48:42 +0000HIGH 7.8: The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a wevtutil.exe file in the folder.https://patchthecve.com/cve/CVE-2024-42051.htmlhttps://patchthecve.com/cve/CVE-2024-42051.htmlWed, 17 Jun 2026 07:48:42 +0000HIGH 7.8: The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by replacing InstRegExp.reg.https://patchthecve.com/cve/CVE-2024-42050.htmlhttps://patchthecve.com/cve/CVE-2024-42050.htmlWed, 17 Jun 2026 07:48:42 +0000HIGH 7.0: The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM via an oplock on CredProvider_Inst.reg.https://patchthecve.com/cve/CVE-2023-3181.htmlhttps://patchthecve.com/cve/CVE-2023-3181.htmlWed, 17 Jun 2026 06:13:31 +0000HIGH 7.8: The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~nsu.tmp and copies itself to it as Au_.exe. The C:\Windows\Temp~nsu.tmp\Au_.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI