CVE-2020-8895: Google Earth

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.

Affected products

• Google Earth: before 7.3.3 (fixed in 7.3.3)

Published 2020-04-21. Last modified 2026-06-17.