CVE-2024-33904

In plugins/HookSystem.cpp in Hyprland through 0.39.1 before 28c8561, through a race condition, a local attacker can cause execution of arbitrary assembly code by writing to a predictable temporary file...

PT-2024-29694 · Unknown · Xdg-Desktop-Portal-Hyprland

Name of the Vulnerable Software and Affected Versions: xdg-desktop-portal-hyprland versions prior to 1.3.3 Description: The issue allows OS command execution due to the lack of single quotes when sending a list of app IDs and titles via the environment. This can be exploited because of how the...

Hyprland 安全漏洞

Hyprland is a wlroots-based dynamic tiling Wayland composition application open-sourced by Hypr Development. A security vulnerability exists in Hyprland version 0.39.1 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary assembly code by writing predictable...