CVE-2019-6265

—

CVSS 3.0

7.8 high

EPSS

<1%p45

Published

Feb 25, 2019 (Feb 25, 2019)

Modified

Jun 17, 2026

Description

The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges.

Vendors: cordaware
Products: bestinformed
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.