CVE-2020-8895

HIGH

Google Earth < 7.3.3 - Unauthenticated Remote Code Execution via Untrusted Search Path

Title source: llm
STIX 2.1

Description

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.google.com/earth/answer/40901?hl=en

Scores

CVSS v3 7.8
EPSS 0.0019
EPSS Percentile 8.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-427 CWE-426
Status published
Products (1)
google/earth < 7.3.3
Published Apr 21, 2020
Tracked Since Feb 18, 2026