Skip to content

Vendor

Private Internet Access vulnerabilities

2 published CVES affecting Private Internet Access, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of Private Internet Access alerts

Products

Latest Private Internet Access CVEs

Newest publication first

  1. CVE-2026-120627 CVE-2026-120627

    Published
    HighCVSS 7.5 EPSS 0.30%

    The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth challenge. This issue was fixed in version 3.2.5, but reint...

  2. CVE-2022-50924 Private Internet Access 3.3 - 'pia-service' Unquoted Service Path

    Published
    HighCVSS 8.5 EPSS 0.22%

    Private Internet Access 3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would exec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.