CVE-2020-18171 Privilege escalation in n/a

High 8.8 Published 26 Jul 2021 Updated 10 Jun 2026

Attackers may escalate privileges via crafted OLE files in TechSmith Snagit, though the vulnerability's validity is disputed.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-18171?

CVE-2020-18171 is a high-severity vulnerability in n/a, published on 26 Jul 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details.

Weakness: CWE-269

Which versions are affected by CVE-2020-18171?

It affects 1 product.

Products include Techsmith Snagit.

How do I fix CVE-2020-18171?

No fix has been published for CVE-2020-18171 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-18171 being exploited?

There is no known exploitation of CVE-2020-18171 in the wild and no public exploit code.

Sources

Also known as GHSA-3rh8-vm3g-5r4x.