Sunshine for Windows vulnerabilities

2 known vulnerabilities in Sunshine for Windows from LizardByte. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Sunshine for Windows: Unquoted Search Path or Element

  CVE-2025-10199Sep 9, 2025LizardByte

  A local privilege escalation vulnerability exists in Sunshine for Windows (version v2025.122.141614 and likely prior versions) due to an unquoted service path.

• 7.8 High severity

  Sunshine for Windows: Uncontrolled Search Path Element

  CVE-2025-10198Sep 9, 2025LizardByte

  Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories.