Vulnerability · Published Jun 3, 2022 · Assigned by mitre

CVE-2022-32269

Critical 9.8

In plain English

A critical-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.6% (higher than 89% of all known vulnerabilities).

Severity (CVSS NVD)9.8Critical

Exploit odds (30 days)3.6%top 10.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core). This leads to arbitrary code execution.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/Edubr2020/RealPlayer_G2_RCE x_refsource_MISC
https://www.youtube.com/watch?v=9c9Q4VZQOUk x_refsource_MISC