Windscribe
5 CVEs across 2 Windscribe products. Browse Windscribe vulnerabilities, severities, and proof-of-concept exploits.
Windscribe products with known CVEs
Windscribe CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-65199 | High | 7.8 | 2025-12-10 | A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitr… |
CVE-2024-6141 | High | 7.8 | 2024-08-21 | Windscribe Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installat… |
CVE-2022-41141 | High | 7.8 | 2023-01-26 | This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute… |
CVE-2020-22809 | High | 7.8 | 2021-05-10 | In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation. |
CVE-2020-27518 | High | 7.8 | 2021-05-04 | All versions of Windscribe VPN for Mac and Windows <= v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low pri… |
CVE-2018-11479 | High | 7.8 | 2018-05-25 | The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \\.\pi… |
CVE-2018-11334 | High | 7.8 | 2018-05-23 | Windscribe 1.81 creates a named pipe with a NULL DACL that allows Everyone users to gain privileges or cause a denial of service via \\.\pipe\WindscribeService. |