Approved changes feed: RSS · Atom

cpe:2.3:a:squirrel:installers_generated_by_squirrel.windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSquirrel (d9ab0014-76c1-5e0e-a7a3-11f90df6c9d3)
ProductInstallers Generated By Squirrel.Windows (d95ad002-e725-56d4-9d19-de2f25baf335)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-46330 vulnerable 2026-06-08 05:50:38.635586 Details available
Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop applications. Installers generated by Squirrel.Windows 2.0.1 and earlier contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.
Published: 2022-12-21T00:00:00.000Z
Updated: 2025-04-16T16:03:10.062Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.