document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDFのクリック可能なリンクによるRCE コンサルタント形式のサイバーセキュリティレポート ドキュメントビューアのリンクハンドラリスクに関するプロフェッショナルな脆弱性評価レポート。影響分析、是正措置、緩和戦略を含みます。 📍 レポート概要...

MiracleLinux 8 : evince-3.28.4-17.el8_10.ML.1 (AXSA:2026-1137:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1137:01 advisory. atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVE-2026-46529 Tenable has extracted the preceding...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-46529

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...