Skip to content

Vendor

LegacyUpdate vulnerabilities

1 published CVE affecting LegacyUpdate, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of LegacyUpdate alerts

Products

Latest LegacyUpdate CVEs

Newest publication first

  1. CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins

    Published
    CriticalCVSS 9.9 EPSS 0.21%

    Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.