The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM.
Export limit exceeded: 425852 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2025-43922
CVSS 3.1 · 8.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-34907
An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to gain access to the system with the highest authority possible and gain full control over the FileWave platform.
CVSS 3.1 · 9.8 Critical
EPSS 16.4%
KEV · Not listed
Vendors
Products
CVE-2022-34906
A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to decrypt sensitive information saved in FileWave, and even send crafted requests.
CVSS 3.1 · 7.5 High
EPSS 10.9%
KEV · Not listed
Vendors
Products
Page 1 of 1.