What’s Vulnerable › Vulnerabilities

CVE-2023-53875: GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-15 · updated 2026-06-17
• Weakness: CWE-319

Description

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to run a reverse shell with SMB server interaction.

Affected products

• Gomlab GOM Player: 2.3.90.5360

References

• https://www.exploit-db.com/exploits/51719
• https://www.gomlab.com/
• https://www.vulncheck.com/advisories/gom-player-remote-code-execution-via-insecure-ie-component
• https://www.exploit-db.com/exploits/51719

Get alerted when CVE-2023-53875 or the next vulnerability affects your stack