Splashtop

10 CVEs across 7 Splashtop products. Browse Splashtop vulnerabilities, severities, and proof-of-concept exploits.

Splashtop products with known CVEs

ProductCVEs
Streamer7
Splashtop4
Mirroring360 Receiver1
Mirroring360 Sender1
Software Updater1
Splashtop For Rmm1
Splashtop Software Updater1
Splashtop CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-50693High8.42026-01-13Splashtop 8.71.12001.0 contains an unquoted service path vulnerability in the Splashtop Software Updater Service that allows local attackers to potentially exe…
CVE-2024-42053High7.82024-07-28The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit…
CVE-2024-42052High7.82024-07-28The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. A local user can exploit…
CVE-2024-42051High7.82024-07-28The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit…
CVE-2024-42050High7.02024-07-28The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit…
CVE-2023-3181High7.82024-01-25The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~nsu.tmp and copies itself to it as Au_.e…
CVE-2021-42714High7.82022-02-15Splashtop Remote Client (Business Edition) through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-42713High7.82022-02-15Splashtop Remote Client (Personal Edition) through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-42712High7.82022-02-15Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2020-12431Medium6.62020-05-21A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe al…