CVE-2023-53875: Gomlab Gom Player

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to run a reverse shell with SMB server interaction.

Affected products

• Gomlab Gom Player: version 2.3.90.5360 only

Published 2025-12-15. Last modified 2026-06-17.