CVE-2020-8289

CVE-2020-8289 – Remote Code Execution as SYSTEM/root via Backblaze Summary Name: Remote Code Execution as SYSTEM/root via Backblaze CVE: CVE-2020-8289 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: Critical Discovery Date: 2020-03-13...

CVE-2020-8290

CVE-2020-8290 – Elevation of Privilege in Backblaze Summary Name: Elevation of Privilege in Backblaze CVE: CVE-2020-8290 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: High Discovery Date: 2020-03-13 Publication Data: 2020-09-09 Fixed...

Backblaze Personal Computer Backup bzserv Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Backblaze Personal Computer Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fla...

Backblaze Personal Computer Backup bztransmit Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Backblaze Personal Computer Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fla...

Backblaze Personal Computer Backup bzfilelist Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Backblaze Personal Computer Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fla...

Backblaze Personal Computer Backup bzreports Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Backblaze Personal Computer Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fla...

Backblaze Personal Computer Backup bzbackup Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Backblaze Personal Computer Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fla...

CVE-2026-19820

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

EUVD-2026-68916

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

CVE-2026-19820

CVE-2026-19820 affects the Backblaze Client for Windows . The root cause is improper link resolution : a local user can create a link from Backblaze's folder to Windows OS system files during a backup, potentially rendering the system not bootable . Successful exploitation requires an administrat...

CVE-2026-19820: Improper Link Resolution Before File Access

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

PT-2026-84060

Name of the Vulnerable Software and Affected Versions Backblaze Client affected versions not specified Description An issue exists where a local user can render a system unbootable by creating a link from the Backblaze folder to Windows OS system files during a backup process. This occurs due to...

MAL-2026-12808 Malicious code in streak-metric-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85f4f43ac36e53cc3254c7e5050d63105543deb781c8884046b7f5443fc3e21 On any require/import of streak-metric-core, top-level code in the main entry reconstructs a URL from String.fromCharCode integer arrays, resolving t...

Malicious code in streak-metric-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85f4f43ac36e53cc3254c7e5050d63105543deb781c8884046b7f5443fc3e21 On any require/import of streak-metric-core, top-level code in the main entry reconstructs a URL from String.fromCharCode integer arrays, resolving t...

Malicious code in streak-core-bucket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e30d02d1e32cea14a74e35046b767fc0f0f5ea6fb5f60958952c2706a8e79c2 On import, the main entry runs a top-level async IIFE that decodes a reversed base64 URL literal to...

MAL-2026-12465 Malicious code in streak-daykey-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfd8e4427384eea912513d380b6615e3213b2df455b3dd42e2292467127b307 On module load, index.mjs invokes flushInternalData, which creates /.cache/openlarq, downloads a binary from a base64-obfuscated Backblaze B2 URL...

Malicious code in streak-daykey-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfd8e4427384eea912513d380b6615e3213b2df455b3dd42e2292467127b307 On module load, index.mjs invokes flushInternalData, which creates /.cache/openlarq, downloads a binary from a base64-obfuscated Backblaze B2 URL...

Malicious code in caldora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720ff44cbfe1253ad00e7fa884ee51d3961308d1a0e5c8b5ec7a05cef05b1b4b [email protected] runs a top-level async routine in index.mjs on import. When executed on Linux with /mnt/c present WSL and NODEENV!= 'production', it...