CVE-2007-4442: epic games unreal engine

EPSS trend

Probability

3.84%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.84% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.84%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedosmultipleVerified
Epic Games Unreal Engine Logging Function - Remote Denial of Service
Maturity: poc

References

7 links

exchange.xforce.ibmcloud.com/vulnerabilities/36102VDB EntryX Refsource XF
www.securityfocus.com/archive/1/477026/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/26506Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securityreason.com/securityalert/3039Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/bid/25374VDB EntryX Refsource BID
aluigi.org/poc/unrwebdos.zipX Refsource MISC
aluigi.org/adv/unrwebdos-adv.txtX Refsource MISC

Related vulnerabilities

CVE-2026-14765epic gamesunreal engine0.39%5d ago14-10-2026 02:31Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL). The URL scheme filter (FURLRequestFilter) is empty by default, which permits all URL schemes. On Windows, this results in a call to ShellExecuteW() with the open verb, so a supplied file:/// URI causes the referenced file to be executed. Any Unreal Engine game that loads user-generated content containing Blueprints is vulnerable to command execution via a malicious local file or a remote file on a WebDAV share. This is an instance of CWE-1188 (Initialization of a Resource with an Insecure Default).CVE-2003-1431epic gamesunreal engine5.24%19y ago23-10-2007 01:00Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL.CVE-2003-1432epic gamesunreal engine+17.54%19y ago23-10-2007 01:00Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.CVE-2003-1430epic gamesunreal engine2.80%19y ago23-10-2007 01:00Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL.CVE-2003-1433epic gamesunreal engine1.18%19y ago23-10-2007 01:00Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.CVE-2007-4443epic gamesunreal engine1.75%19y ago21-08-2007 00:00The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a string containing many 0x07 characters in (1) a request to the images/ directory, (2) the Content-Type field, (3) a HEAD request, and possibly other unspecified vectors.

All vulnerabilities inunreal engine

CVE-2007-4442: epic games unreal engine

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References