CVE-2020-18172: Trezor Bridge

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.

Affected products

• Trezor Bridge: version 2.0.27 only

Published 2021-07-26. Last modified 2026-06-17.