CVE-2020-36938: WinAVR Version 20100110 - Insecure Folder Permissions

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-01-27 · updated 2026-06-17
Weakness: CWE-732

Description

WinAVR version 20100110 contains an insecure permissions vulnerability that allows authenticated users to modify system files and executables. Attackers can leverage the overly permissive access controls to potentially modify critical DLLs and executable files in the WinAVR installation directory.

Affected products

WinAVR: 20100110

References

https://sourceforge.net/projects/winavr/
https://www.exploit-db.com/exploits/49379
https://www.vulncheck.com/advisories/winavr-version-insecure-folder-permissions

Get alerted when CVE-2020-36938 or the next vulnerability affects your stack