Claimed privilege escalation via OLE file embedding
Published Jul 26, 2021 · Updated Jun 10, 2026
Claimed privilege escalation in TechSmith Snagit 19.1.0.2653 allows attackers to hide crafted files through OLE embedding. The report treats OLE-related components and common file hashes as proof that Snagit embeds or renders malicious objects, without identifying a triggering file or exploitable operation. The claimed path requires a target user to open an attacker-supplied container, but TechSmith states that Snagit performs neither operation and that no repeatable exploit has been demonstrated.
Summary
What happened
Claimed privilege escalation in TechSmith Snagit 19.1.0.2653 allows attackers to hide crafted files through OLE embedding. The report treats OLE-related components and common file hashes as proof that Snagit embeds or renders malicious objects, without identifying a triggering file or exploitable operation. The claimed path requires a target user to open an attacker-supplied container, but TechSmith states that Snagit performs neither operation and that no repeatable exploit has been demonstrated.
The record
- CVE
- CVE-2020-18171
- Published
- Jul 26, 2021
- Updated
- Jun 10, 2026
- Vendor
- Unknown vendor
- Product
- Unknown product
- Classifications
- CWE-269
- Attack vector
- Unavailable
- Privileges
- Unavailable
Timeline
How it unfolded
- Jul 26, 2021CVE publishedPublication date reported by the CVE source.
- Jun 10, 2026Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
What conditions does exploitation require?
What is affected?
Affected products and versions are unavailable in this record.
Published CVSS scores
No CVSS assessment is available in this record.
CVSS describes severity. EPSS estimates exploitation probability.
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Weakness, pattern, technique
Public exploit references
No public exploit references are available in this record.
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo