TwinkletrayCVEs & Vulnerabilities

1 CVEs affecting Twinkletray products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

twinkle tray 1

CVE-2021-28119CRITICAL

Twinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.

10 Mar 2021

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database