Approved changes feed: RSS · Atom

cpe:2.3:a:splashtop:streamer:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorSplashtop (6eb60475-c619-5667-a94e-ef5915111809)
ProductStreamer (30818d12-b62b-5a76-abab-6f51603a4f4c)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42053 vulnerable 2026-06-08 06:43:56.040188 Details available
HIGH (7.8)
The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a version.dll file in the folder.
Published: 2024-07-28T00:00:00.000Z
Updated: 2024-08-02T04:54:31.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42051 vulnerable 2026-06-08 06:43:56.039326 Details available
HIGH (7.8)
The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by replacing InstRegExp.reg.
Published: 2024-07-28T00:00:00.000Z
Updated: 2024-08-02T04:54:31.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42050 vulnerable 2026-06-08 06:43:56.037715 Details available
HIGH (7)
The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM via an oplock on CredProvider_Inst.reg.
Published: 2024-07-28T00:00:00.000Z
Updated: 2024-08-02T04:54:31.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42712 vulnerable 2026-06-08 05:35:22.463047 Details available
Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions.
Published: 2022-02-15T13:45:15.000Z
Updated: 2024-08-04T03:38:50.113Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.