← back
CVE-2021-33592CWE-20

CVE-2021-33592

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.1%
exploitation probability
2.1%top 20% of all CVEs
observed exploitation
nono source reports it
NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.
Affected products
NAVER · NAVER Toolbar