CVE-2021-28927

HighCVSS 7.8

Published: 07/04/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.38%

69th percentile - higher than 69% of all known CVEs

Summary

In RetroArch 1.9.0 for Windows, the accessibility_speak_windows function in platform_win32.c passes unsanitized input to PowerShell, allowing attackers with write access to filesystems used by RetroArch to execute code via command injection using specially crafted file and directory names.

Risk Assessment

Attackers can remotely execute arbitrary code in the context of the user running RetroArch, potentially leading to system compromise, data theft, or malware installation.

Recommendation

Immediately update RetroArch to version 1.9.1 or later, which includes a fix that removes the command injection vulnerability in the accessibility_speak_windows function.

Other vulnerabilities in RetroArch

CVE-2026-107050Critical
An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.

Original NVD description (English source)

The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platform_win32.c via the accessibility_speak_windows function, which allows attackers who have write access on filesystems that are used by RetroArch to execute code via command injection using specially a crafted file and directory names.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS