CVE-2022-32269: Realnetworks Realplayer

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core). This leads to arbitrary code execution.

Affected products

Published 2022-06-03. Last modified 2026-06-17.