Skip to content
OpenAdvisories

Vendor

Voidtools

2 known vulnerabilities.

Products

Everything 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2025-12683

    NULL DACL assigned to Named Pipe communicating with SYSTEM Service

    The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named pipe. The named pipe has a NULL DACL and thus provides all users full permission over it; leading to potential Service Denial Of Service o…

    Voidtools Everything
  • Medium 6.1
    CVE-2021-20784

    HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote …

    Voidtools Everything