Opswat vulnerabilities
We track 5 vulnerabilities in Opswat products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2025.
Latest Opswat vulnerabilities
- 7.7 High severity
Outpost Security Suite: Improper Neutralization of Special Elements used in a Command
An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) allows a local attacker to execute arbitrary code via the lock function. The manufacturer fixed the vulnerability in version 8.0 (4164.652.1856) from December 17, 2012.
- 7.1 High severity
MetaDefender Endpoint Security SDK: Incorrect Privilege Assignment
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to
- 9.8 Critical severity
Metadefender Kiosk: Buffer Copy without Checking Size of Input
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service (loss of communication).
- 9.8 Critical severity
Metadefender Kiosk: Improper Privilege Management
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows (desktop shortcuts, narrator) can be abused for privilege escalation.
- 9.8 Critical severity
Metadefender: Improper Privilege Management
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.