DOSBox is a widely used emulator for legacy DOS applications and games, maintaining a narrow, focused product scope centered on the single DOSBox emulator itself. The durable vulnerability signal reflects the emulator's memory-handling demands, with observed weaknesses clustering around improper restriction of operations within memory buffer bounds. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Dosbox over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-7165CRITICAL A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code. | Jul 3, 2019 | 9.8 | 33 | NO | NO |
CVE-2019-12594CRITICAL DOSBox 0.74-2 has Incorrect Access Control. | Jul 2, 2019 | 9.8 | 32 | NO | NO |
CVE-2007-6328HIGH DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response st | Dec 13, 2007 | 7.2 | 18 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Dosbox.
Media articles that mention a CVE ID that affects a product developed by Dosbox — matched by CVE ID, not by vendor name.