361 matches found
PT-2025-39202
Name of the Vulnerable Software and Affected Versions Sunshine versions prior to 2025.923.33222 Description Sunshine, a self-hosted game stream host for Moonlight, is affected by an issue where the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is...
Sunshine 安全漏洞
Sunshine is an open source self-service game streaming host for Moonlight by LizardByte. A security vulnerability exists in versions prior to Sunshine 2025.923.33222, which stems from the Windows service SunshineService being installed without wrapping the executable path in quotes, which could...
CVE-2025-10199
A local privilege escalation vulnerability exists in Sunshine for Windows version v2025.122.141614 and likely prior versions due to an unquoted service path...
CVE-2025-10198
Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories...
Elevated Privileges and Arbitrary Code Execution issues in Sunshine for Windows v2025.122.141614
Overview Two local security vulnerabilities have been identified in Sunshine for Windows, version v2025.122.141614 and likely prior versions. These issues could allow attackers to execute arbitrary code and escalate privileges on affected systems. Description Sunshine is a self-hosted game stream...
CVE-2025-10199
A local privilege escalation vulnerability exists in Sunshine for Windows version v2025.122.141614 and likely prior versions due to an unquoted service path...
Uncontrolled Search Path Element
Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the DLL loading process. An attacker can execute arbitrary code by placing a malicious DLL in a user-writable directory that is included in the system PATH. Remediation Upgrade LizardByte/Sunshine to...
CVE-2025-10199 A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows
A local privilege escalation vulnerability exists in Sunshine for Windows version v2025.122.141614 and likely prior versions due to an unquoted service path...
CVE-2025-10199 A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows
A local privilege escalation vulnerability exists in Sunshine for Windows version v2025.122.141614 and likely prior versions due to an unquoted service path...
CVE-2025-10199 A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows
A local privilege escalation vulnerability exists in Sunshine for Windows version v2025.122.141614 and likely prior versions due to an unquoted service path...
CVE-2025-10199
Sunshine for Windows (v2025.122.141614 and likely earlier) contains two local privilege escalation issues: CVE-2025-10198 (unquoted service path) and CVE-2025-10199 (DLL search-order hijacking). The unquoted service path allows a local attacker to place a malicious executable in a path used by th...
CVE-2025-10198 LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability
Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories...
CVE-2025-10198 LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability
Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories...
CVE-2025-10198 LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability
Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories...
CVE-2025-10198
Sunshine for Windows v2025.122.141614 has CVE-2025-10198 (DLL search-order hijacking) and related Unquoted Service Path issues that could allow a local attacker to load a malicious DLL from user-writable PATH directories or escalate privileges via an unquoted service path. Impact is described as ...
Sunshine 安全漏洞
Sunshine is an open source self-service game streaming host for Moonlight by LizardByte. A security vulnerability exists in Sunshine v2025.122.141614 and earlier versions, which stems from unquoted service paths and may result in local elevation of privilege...
PT-2025-36905
Name of the Vulnerable Software and Affected Versions: Sunshine for Windows versions prior to v2025.122.141614 Description: A local privilege escalation issue exists in Sunshine for Windows due to an unquoted service path. Recommendations: Ensure the service path is enclosed in quotes...
PT-2025-36904
Name of the Vulnerable Software and Affected Versions: Sunshine for Windows version v2025.122.141614 Description: Sunshine for Windows version v2025.122.141614 contains a DLL search-order hijacking vulnerability. This allows attackers to insert a malicious DLL into user-writable PATH directories...
WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Sunshine Photo Cart versions = 3.5.3...