Splashtop vulnerabilities
We track 6 vulnerabilities in Splashtop products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2026.
Latest Splashtop vulnerabilities
- 8.4 High severity
Splashtop: Unquoted Search Path or Element
Splashtop 8.71.12001.0 contains an unquoted service path vulnerability in the Splashtop Software Updater Service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Splashtop\Spla
- 7.8 High severity
streamer: Incorrect Default Permissions
The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a version.dll file in the folder.
- 7.8 High severity
Streamer: Creation of Temporary File With Insecure Permissions
The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a wevtutil.exe file in the folder.
- 7.8 High severity
streamer: Use of Weak Credentials
The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by replacing InstRegExp.reg.
- 7.0 High severity
streamer: Improper Privilege Management
The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM via an oplock on CredProvider_Inst.reg.
- 7.8 High severity
Splashtop Software Updater: Creation of Temporary File in Directory with Insecure Permissions
The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~nsu.tmp and copies itself to it as Au_.exe. The C:\Windows\Temp~nsu.tmp\Au_.exe file is automatically launched as SYSTEM when the system rebo