Replaysorcery

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-36983 HIGH This Week

replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Replaysorcery

NVD GitHub

CVSS 3.1

7.8

EPSS

0.5%

CVE-2021-26936 HIGH POC This Week

The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Replaysorcery

NVD GitHub

CVSS 3.1

7.8

EPSS

0.5%

CVE-2021-36983

EPSS 0% CVSS 7.8

HIGH This Week

Information Disclosure Replaysorcery

NVD GitHub

CVE-2021-26936

EPSS 1% CVSS 7.8

HIGH POC This Week

Privilege Escalation Replaysorcery

NVD GitHub