What’s Vulnerable › Vulnerabilities

CVE-2023-30382

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-23 · updated 2026-06-17
• Weakness: CWE-787

Description

A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters.

Affected products

• Valvesoftware Half-Life: all versions

References

• https://labs.jumpsec.com/advisory-cve-2023-30382-half-life-local-privilege-escalation/
• https://labs.jumpsec.com/advisory-cve-2023-30382-half-life-local-privilege-escalation/

Get alerted when CVE-2023-30382 or the next vulnerability affects your stack