CVE Tools
Track your stack

Sunshine

12 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Sunshine, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Sunshine CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Sunshine CVEs per month
MonthCVEs
2024-110
2024-120
2025-011
2025-020
2025-030
2025-040
2025-050
2025-060
2025-072
2025-080
2025-093
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-051
2026-060
2026-070
2026-080
2026-090
2026-101

Severity

How the 12 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical217%
  • High542%
  • Medium542%

Latest CVEs

The 12 most recently published vulnerabilities affecting Sunshine.

  1. CVE-2026-111044Disabled Sunshine clients can bypass revocation with a derived client certificate7.6
  2. CVE-2026-32253Sunshine: Authentication bypass via improper client certificate validation9.8
  3. CVE-2025-54081SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution6.7
  4. CVE-2025-10199A local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows7.8
  5. CVE-2025-10198LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability7.8
  6. CVE-2025-53095Sunshine application-wide CSRF in the UI leads to command injection as Administrator9.6
  7. CVE-2025-53096Sunshine clickjacking in the UI leads to unauthorized actions being performed5.4
  8. CVE-2024-51738Sunshine improperly enforces pairing protocol request order8.1
  9. CVE-2024-45407Sunshine has incorrect state management during pairing process may lead to incorrectly authorized client6.5
  10. CVE-2024-31226Sunshine's unquoted executable path could lead to hijacked execution flow4.9
  11. CVE-2024-31221Clients removed during unpairing process may regain access if Sunshine was not restarted5.9
  12. CVE-2024-31220Sunshine vulnerable to remote unauthenticated arbitrary file read7.3

Product grouping is registry-driven, with AI assist and human review. How it works