CVE Catalog

CVE-2023-34634

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
7.69%

94th percentile - higher than 94% of all known CVEs

Summary

Greenshot version 1.2.10 and below allows arbitrary code execution due to insecure deserialization of .NET content when a .greenshot file is opened.

Risk Assessment

Exploitation of this vulnerability could lead to remote code execution, posing a serious security threat to the organization's systems.

Recommendation

It is recommended to update Greenshot to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS