CVE-2020-7827: Hmtalk Daviewindy

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Affected products

• Hmtalk Daviewindy: up to and including 8.98.7

Published 2020-07-30. Last modified 2026-06-17.