CVE-2020-18171

HIGH 8.8CVE-2020-18171 · Published 26/07/2021 · updated 17/06/2026

In short

CVE-2020-18171 is a HIGH (CVSS 8.8) vulnerability affecting snagit (techsmith).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 33.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
snagit techsmith	`= 19.1.0.2653`	No fix yet

Description

TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details.

References

docs.google.com/document/d/1W33rsdISmexLOGS4VmLUIITRU_KqGULcij1Z6QyxsjU/edit · Third Party Advisory
GitHubAssessments/CVE_Assessment_06_2019 · Exploit
TechSmith/TSC-Security-Public

More vulnerabilities in snagit

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

snagit

techsmith

= 19.1.0.2653

No fix yet

Description

More vulnerabilities in snagit

See all →