Vulnerabilities > Minecraft
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-30 | CVE-2023-33245 | Link Following vulnerability in Minecraft Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink. | 8.8 |
| 2022-03-28 | CVE-2022-23884 | Integer Overflow or Wraparound vulnerability in Minecraft Bedrock Server 1.18.2 Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_read (packet deserializer). | 9.8 |
| 2021-07-20 | CVE-2021-35054 | Path Traversal vulnerability in Minecraft Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files. | 7.5 |