EG
Vendor
Epic Games
28
CVEs
0
On KEV
1
New 30D
Products
UE7.7
Unreal Engine
Epic Games
10 CVEs0 on KEV1 new
UT–
Unreal Tournament
Epic Games
4 CVEs0 on KEV0 new
UT–
Unreal Tournament 2003
Epic Games
3 CVEs0 on KEV0 new
UT–
Unreal Tournament 3
Epic Games
3 CVEs0 on KEV0 new
EG8.8
Epic Games Launcher
Epic Games
2 CVEs0 on KEV0 new
UT–
Unreal Tournament 2004
Epic Games
2 CVEs0 on KEV0 new
EA8.4
Easy Anti-Cheat
Epic Games
1 CVEs0 on KEV0 new
EG8.8
Epic Games Store
Epic Games
1 CVEs0 on KEV0 new
LA4.5
Launcher
Epic Games
1 CVEs0 on KEV0 new
UT–
Unreal Tournament Server
Epic Games
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-14765 | UE Unreal Engine Epic Games | 7.7 | Oct 14 | Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL |
| CVE-2025-61973 | EG Epic Games Store Epic Games | 8.8 | Jan 15 | A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store |
| CVE-2021-47739 | EA Easy Anti-Cheat Epic Games | 8.4 | Dec 23 | Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service Path |
| CVE-2025-0567 | LA Launcher Epic Games | 4.5 | Jan 19 | Epic Games Launcher Installer profapi.dll untrusted search path |
| CVE-2024-11872 | EG Epic Games Launcher Epic Games | 7.8 | Dec 11 | Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability |
| CVE-2018-17707 | EG Epic Games Launcher Epic Games | 8.8 | Jan 24 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Epic Games Launcher versions prior to 8.2.2 |
| CVE-2008-7015 | UT Unreal Tournament Epic Games | – | Aug 19 | Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service (server exit) via a… |
| CVE-2008-7011 | UT Unreal Tournament Epic Games | – | Aug 19 | The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated… |
| CVE-2008-4243 | UT Unreal Tournament 3 Epic Games | – | Sep 25 | Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary… |
| CVE-2008-3409 | UT Unreal Tournament 3 Epic Games | – | Jul 31 | Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary… |
| CVE-2008-3410 | UT Unreal Tournament 3 Epic Games | – | Jul 31 | Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a UDP packet in which the value of a… |
| CVE-2008-3396 | UT Unreal Tournament 2004 Epic Games | – | Jul 31 | Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of… |
| CVE-2007-4442 | UE Unreal Engine Epic Games | – | Aug 21 | Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of… |
| CVE-2007-4443 | UE Unreal Engine Epic Games | – | Aug 21 | The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a… |
| CVE-2004-1805 | UE Unreal Engine Epic Games | – | Dec 31 | Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via… |
| CVE-2004-1958 | UE Unreal Engine Epic Games | – | Dec 31 | Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via |
| CVE-2004-0608 | UE Unreal Engine Epic Games | – | Dec 6 | The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and… |
| CVE-2003-1433 | UE Unreal Engine Epic Games | – | Dec 31 | Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times |
| CVE-2003-1432 | UE Unreal Engine Epic Games | – | Dec 31 | Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with… |
| CVE-2003-1431 | UE Unreal Engine Epic Games | – | Dec 31 | Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL |
| CVE-2003-1430 | UE Unreal Engine Epic Games | – | Dec 31 | Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL |
| CVE-2002-1507 | UT Unreal Tournament Server Epic Games | – | Apr 2 | Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports… |