SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityRejected

CVE-2017-20051

Notes: The sole source documents PE-format conformance defects in innosetup-5.5.9.exe with no exploit, attack path, or untrusted search path condition (CWE-426/427), and the author states Windows loads these files normally; the record's remote/exploited…

UnscoredEPSS 0.75%

Does this matter?

Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.

Description

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The sole source documents PE-format conformance defects in innosetup-5.5.9.exe with no exploit, attack path, or untrusted search path condition (CWE-426/427), and the author states Windows loads these files normally; the record's remote/exploited claims are unsupported, as is the product maintainer's contention.

CVSS
Not yet scored
EPSS
0.75% probability · 53th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Source
cna@vuldb.com
EPSS trend
0%3%5%30 September 2026: 0.75%30 September 202630 September 2026

EPSS 0.8% since 30 September 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.