Windscribe — Vulnerabilities & Security Advisories 3

Windscribe operates as a VPN service providing privacy and security for internet users. Historically, its vulnerabilities have included cross-site scripting (XSS) and remote code execution (RCE) flaws, often stemming from improper input validation and insecure API endpoints. The service has faced three recorded CVEs, with one notable incident involving a privilege escalation vulnerability that could allow unauthorized access to user accounts. Despite these issues, Windscribe maintains features like a kill switch and DNS leak protection, though users should remain vigilant about potential security risks associated with third-party dependencies and server-side configurations.