Approved changes feed: RSS · Atom

cpe:2.3:a:kite:kite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKite (340a9979-3e55-516d-894e-df1d414c6358)
ProductKite (7b7ac4f6-e377-5e06-ac03-9bde2b665b59)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37247 vulnerable 2026-06-08 05:25:50.423937 Kite 4.2.0.1 U1 Unquoted Service Path Privilege Escalation
HIGH (7.8)
Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be executed with LocalSystem privileges when the service starts.
Published: 2026-05-16T15:26:02.268Z
Updated: 2026-05-18T12:40:56.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36958 vulnerable 2026-06-08 05:25:49.917849 Kite 1.2020.1119.0 - 'KiteService' Unquoted Service Path
HIGH (7.8)
Kite 1.2020.1119.0 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Kite\KiteService.exe' to inject malicious executables and escalate privileges on the system.
Published: 2026-01-26T17:43:08.629Z
Updated: 2026-05-14T02:06:42.568Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.