Harbingergroup Office Player — known CVE vulnerabilities

Every CVE whose affected-product data names Harbingergroup Office Player, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2023-34407 — CVSS 7.5 (high): OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a URL.