SIMATIC WinCC Runtime Professional vulnerabilities

2 known vulnerabilities in SIMATIC WinCC Runtime Professional from Siemens. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Google Brotli Unchecked Return Value Exploited

  CVE-2026-111497Oct 22, 2026GoogleEPSS 82.6%

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a

• 7.8 High severity

  SIMATIC PCS 7 V8.2: Initialization of a Resource with an Insecure Default

  CVE-2022-24287May 20, 2022Siemens

  A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Run