CVE-2023-33865: Renderdoc

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.

Affected products

• Renderdoc Renderdoc: before 1.27 (fixed in 1.27)

Published 2023-06-07. Last modified 2026-06-17.