Vulnerability · Published Jan 27, 2026 · Assigned by VulnCheck
CVE-2020-36938WinAVR Version 20100110 - Insecure Folder Permissions
High 8.8
In plain English
A high-severity incorrect permission assignment in WinAVR from WinAVR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.2%top 85.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
WinAVR version 20100110 contains an insecure permissions vulnerability that allows authenticated users to modify system files and executables. Attackers can leverage the overly permissive access controls to potentially modify critical DLLs and executable files in the WinAVR installation directory.
Affected products (as reported)
Weakness: CWE-732 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-49379 exploit
- WinAVR Official Project Homepage product
- VulnCheck Advisory: WinAVR Version 20100110 - Insecure Folder Permissions third-party-advisory