CVE-2007-4443: epic games unreal engine

EPSS trend

Probability

1.75%

Chance of exploitation in the next 30 days

Percentile

78%

Versus all other CVEs

30-day change

0.00 pp

From 1.75% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.75%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

www.securityfocus.com/archive/1/477026/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/26506Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securityreason.com/securityalert/3039Third Party AdvisoryX Refsource SREASON
exchange.xforce.ibmcloud.com/vulnerabilities/36103VDB EntryX Refsource XF
www.securityfocus.com/archive/1/478053/100/200/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/478064/100/200/threadedMailing ListX Refsource BUGTRAQ
aluigi.org/poc/unrwebdos.zipX Refsource MISC
aluigi.org/adv/unrwebdos-adv.txtX Refsource MISC

Related vulnerabilities

CVE-2026-14765epic gamesunreal engine0.39%5d ago14-10-2026 02:31Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL). The URL scheme filter (FURLRequestFilter) is empty by default, which permits all URL schemes. On Windows, this results in a call to ShellExecuteW() with the open verb, so a supplied file:/// URI causes the referenced file to be executed. Any Unreal Engine game that loads user-generated content containing Blueprints is vulnerable to command execution via a malicious local file or a remote file on a WebDAV share. This is an instance of CWE-1188 (Initialization of a Resource with an Insecure Default).CVE-2003-1431epic gamesunreal engine5.24%19y ago23-10-2007 01:00Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL.CVE-2003-1432epic gamesunreal engine+17.54%19y ago23-10-2007 01:00Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.CVE-2003-1430epic gamesunreal engine2.80%19y ago23-10-2007 01:00Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL.CVE-2003-1433epic gamesunreal engine1.18%19y ago23-10-2007 01:00Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.CVE-2007-4442epic gamesunreal engine3.84%19y ago21-08-2007 00:00Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.

All vulnerabilities inunreal engine

CVE-2007-4443: epic games unreal engine

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References