CVE-2022-32291: Realnetworks Realplayer

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

In Real Player through 20.1.0.312, attackers can execute arbitrary code by placing a UNC share pathname (for a DLL file) in a RAM file.

Affected products

• Realnetworks Realplayer: up to and including 20.1.0.312

Published 2022-06-05. Last modified 2026-06-17.