Affected Systems

Time4Popcorn app (Popcorn Time fork), all versions with vulnerable updater mechanism. Millions of devices potentially affected. Application is abandoned and no longer maintained.

Exploitation Status

No active exploitation reported. Researchers remotely disabled the vulnerable updater mechanism before public disclosure. No CVE assigned. No public PoC available.

Business Impact

High-severity remote code execution vulnerability with elevated privileges in an abandoned application. Risk mitigated by researchers who disabled the vulnerable updater remotely. Organizations with Time4Popcorn installations remain at risk if the app is reinstalled or updater reactivated. No vendor patches available due to abandoned status.

Urgency

🟡 Within a week

Recommended Actions

  • Identify and uninstall Time4Popcorn from all endpoints using software inventory tools or EDR queries
  • Block Time4Popcorn executables and updater processes via application control policies (AppLocker, WDAC, or endpoint security platforms)
  • Search network logs for Time4Popcorn update traffic patterns to identify active installations
  • Add Time4Popcorn domains and update servers to DNS blocklists or web proxy deny lists
  • Educate users about risks of abandoned software and enforce policies against unauthorized BitTorrent clients