VULNERABILITY INTELLIGENCE

CVE-2020-5754

CVSS score9.1 CRITICAL

EPSS probability1.55%

CISA KEVNot currently listed

Published2020-06-15

Last modified2026-06-17

Description

Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening TCP port, resulting in crashing or reading memory contents of the Webroot endpoint agent.