High severity7.3NVD Advisory· Published Aug 19, 2022· Updated Jun 17, 2026

CVE-2022-36263

Description

StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute arbitrary code via a crafted .exe file.

Affected products

Logitech/Streamlabs Desktop
cpe:2.3:a:logitech:streamlabs_desktop:1.9.0:*:*:*:*:*:*:*
StreamLabs/StreamLabs Desktop Applicationllm-create2 versions
=1.9.0+ 1 more
- (no CPE)range: =1.9.0
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/ycdxsb/Vuln/blob/main/Streamlabs-CreateProcessW-API-Misuse-Binary-Hijack/nvdBroken LinkExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000