CyberSecBulletin

LegacyUpdate vulnerabilities

We track 1 vulnerability in LegacyUpdate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.

1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score

Latest LegacyUpdate vulnerabilities

  • 9.9 Critical severity

    LegacyUpdate: Origin Validation Error

    CVE-2026-97381LegacyUpdate

    Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hos