Realnetworks

    Dashboard / Vendors

    Products: 26
    Vulnerabilities: 218
    Known Exploited: 0
    130
    Critical Level Threats
    30
    High Level Threats
    51
    Medium Level Threats
    6
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2011-10028

    RealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution

    Last Modified: Apr 15, 2026
    Published: Aug 20, 2025

    CVE-2022-32291

    In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file.

    Last Modified: Nov 21, 2024
    Published: Jun 05, 2022

    CVE-2022-32270

    In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder (DLL planting could also occur).

    Last Modified: Nov 21, 2024
    Published: Jun 03, 2022

    CVE-2022-32271

    In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.

    Last Modified: Nov 21, 2024
    Published: Jun 03, 2022

    CVE-2022-32269

    In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core). This leads to arbitrary code execution.

    Last Modified: Nov 21, 2024
    Published: Jun 03, 2022
    Items Per Page