CVE-2023-6362: Winhex

High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured Exception Handler (SEH) registers. This could allow attackers to execute arbitrary code via a long filename argument.

Affected products

• Winhex Winhex: version 16.1 SR-1 only; version 20.4 only; version 16.1sr-1 only

Published 2024-10-07. Last modified 2026-06-17.