CVE-2020-18171

HighCVSS 8.8

Published: 26/07/2021(UTC)Updated: 10/06/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.04%

12th percentile - higher than 12% of all known CVEs

Summary

TechSmith Snagit version 19.1.0.2653 uses OLE, which can allow attackers to obfuscate and embed crafted files used to escalate privileges. Snagit's use of OLE is a security vulnerability unto itself.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access and privilege escalation, posing a serious threat to organizational security.

Recommendation

It is recommended to update Snagit to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in TechSmith Snagit 19.1.0.2653

CVE-2020-18169High
A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. Exploiting this vulnerability would require the end user to ignore other safety mechanisms provided by the Host OS.

Original NVD description (English source)

TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS