VYPR

Protonvpn

by Proton

CVEs (2)

  • CVE-2022-50917HigJan 13, 2026
    risk 0.51cvss 7.8epss 0.00

    ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations…

  • CVE-2024-37391HigJul 22, 2024
    risk 0.00cvss 7.8epss 0.00

    ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant('{autopf}\Proton\Drive') + '"' in Setup/setup.iss.