CVE-2021-33592: Naver Toolbar

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.

Affected products

• Naver Toolbar: before 4.0.30.323 (fixed in 4.0.30.323)

Published 2021-07-19. Last modified 2026-06-17.