CVE-2023-46814: Videolan Vlc Media Player

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM.

Affected products

• Videolan Vlc Media Player: before 3.0.19 (fixed in 3.0.19)

Published 2023-11-22. Last modified 2026-06-17.