CVE-2020-8895

CVE-2020-8895 refers to a DLL hijacking/Untrusted Search Path issue in the Google Earth Pro Windows installer prior to 7.3.3. An unauthenticated, local attacker can exploit the untrusted search path by placing a crafted local file to achieve remote code execution on the target system. Affected so...

CVE-2020-8896

CVE-2020-8896 — Google Earth Pro buffer overflow in khcrypt (≤7.3.2) A buffer overflow in the khcrypt implementation of Google Earth Pro versions up to and including 7.3.2 enables an attacker to perform a Man-in-the-Middle (MitM) attack by crafting a key to read data past the end of the buffer ho...