Vulnerability intelligence
CVE-2026-30612
An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components
CVSS Score
9.8
Critical
EPSS — Exploit Probability
0.4%
Riskier than 35% of all CVEs · checked 2026-10-24
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Unconfirmed
Vendor fix published
1 article across 1 outlet · first covered Oct 24, 2026 · latest Oct 24, 2026
Coverage timeline
RSS-
Popcorn Time flaw exposed millions to SYSTEM level attacks worldwidethehackernews.com · Oct 24, 2026