document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDF 클릭 가능한 링크 RCE 컨설턴트 스타일 사이버 보안 보고서 문서 뷰어 링크 처리기 위험에 대한 전문 취약점 평가 보고서로, 영향 분석, 수정 방안 및 완화 전략을 포함합니다. 📍 보고서 개요 필드| 세부 정보 ---|--- 보고서 유형| 취약점 평가 보고서 수행 컨텍스트| 보안 연구 주요 초점| 애플리케이션 보안 대상 독자| 보안 팀, 엔지니어링 팀, 채용 담당자 출력 스타일| 경영진 요약, 기술 분석, 비즈니스 영향, 수정 로드맵 공개 상태| 공개...

CVE-2022-35497

Trimble의 TM4WEB =22.2.0에서 세션 식별자 보안 구성 오류로 인해, 반사형 크로스 사이트 스크립팅을 통해 유효한 세션 쿠키를 복구할 수 있으며, 이는 외부 문서 뷰어 엔드포인트에 영향을 미칩니다. 구체적으로, 세션 유지에 사용되는 세 가지 쿠키는 UID, rstring 및 PHPSESSIONID이며, 이들 중 어느 것도 JavaScript 실행 벡터로부터 복구를 방지하는 적절한 HttpOnly 플래그가 설정되어 있지 않습니다. 1단계 : 공격자는 반사형 크로스 사이트 스크립팅 취약점 CVE-2022-35499를...

evince-cve-2017-1000083

このリポジトリには README がありません。...

[SECURITY] Fedora 45 Update: atril-1.28.7-2.fc45

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

EUVD-2022-56032

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

PT-2026-85665

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2022-35497

The Trimble TM4WEB software (version

CVE-2022-35497: Improper Neutralization of Input During Web Page Generation

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

firefox: thunderbird: Mitigation bypass in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the PDF Viewer component...

CVE-2026-17875

Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-59552 WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...

CVE-2026-16377

A mitigation bypass vulnerability exists in the PDF Viewer component of the Mozilla Firefox and Thunderbird browsers. This flaw could potentially lead to the execution of arbitrary code. The issue has been addressed in Firefox 153 , Firefox ESR 140.13 , Thunderbird 153 , and Thunderbird 140.13 . ...

TencentOS Server 3: evince (TSSA-2026:0620)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0620 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Exploit for CVE-2026-46529

─── CVE-2026-46529 ─── 🏴 AMN SECURITY 🏴 مركز أب...

TencentOS Server 4: evince (TSSA-2026:0539)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0539 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-57255 Security vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass Clamp

The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is not validated; when subsequently read, it produces an illegal pointer that accesses an out-of-bounds region, crashing the application...

OESA-2026-2766 evince security update

Evince is a document viewer for multiple document formats. The goal of evince is to replace the multiple document viewers that exist on the GNOME Desktop with a single simple application. Evince is specifically designed to support the file following formats: PDF, Postscript, djvu, tiff, dvi, XPS,...