CyberSecBulletin

Greenshot vulnerabilities

We track 2 vulnerabilities in Greenshot products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Greenshot vulnerabilities

  • 7.3 High severity

    greenshot: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-22035GreenshotEPSS 1.03%

    Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to OS Command Injection through unsanitized filename processing. The FormatArguments method in ExternalCommandDestination.cs:269 uses string.Format() to insert user

  • 7.8 High severity

    greenshot: Deserialization of Untrusted Data

    CVE-2025-59050Greenshot

    Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WM_COPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process