CVE-2019-12097

7.8 highEPSS 0.6%

High (7.8) in progress fiddler. EPSS 0.6% chance of exploitation in the next 30 days.

Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the original EnableLoopback.exe.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-354
Published: 2019-06-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:fiddler

References

https://vuldb.com/?id.135671
https://vuldb.com/?id.135671

Check your stack JSON