VULNERABILITY INTELLIGENCE

CVE-2020-8895

CVSS score7.8 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2020-04-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.

Weakness classification

  • cve-coordination@google.com: CWE-427
  • nvd@nist.gov: CWE-426

Primary references