CVE-2019-15598
Critical 9.8
Description
A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Metrics
- CVSS 3.1
-
9.8 (CRITICAL)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 3% (percentile: 86) as of 2 November 2026
- CWE
- CWE-94, CWE-78
Affected products
tree-kill_project: tree-kill; microsoft: windows
References
- https://hackerone.com/reports/703415 Permissions RequiredThird Party Advisory
- https://hackerone.com/reports/703415 Permissions RequiredThird Party Advisory