CVE-2020-18169

HighCVSS 7.8

Published: 26/07/2021(UTC)Updated: 10/06/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.05%

17th percentile - higher than 17% of all known CVEs

Summary

A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. Exploiting this vulnerability would require the end user to ignore other safety mechanisms provided by the Host OS.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to serious data security consequences.

Recommendation

It is recommended to update to the latest version of Snagit and educate users about security and the protective mechanisms of the operating system.

Other vulnerabilities in TechSmith Snagit 19.1.1.2860

CVE-2020-18171High
TechSmith Snagit version 19.1.0.2653 uses OLE, which can allow attackers to obfuscate and embed crafted files used to escalate privileges. Snagit's use of OLE is a security vulnerability unto itself.

Original NVD description (English source)

A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS