CVE-2025-56503

CVE-2025-56503 Описание Проблема в Sublime HQ Pty Ltd Sublime Text 4, версия 4200, позволяет аутентифицированным злоумышленникам с низким уровнем привилегий повышать привилегии до Администратора путем замены файла удаления на поддельный бинарный файл в папке установки. Затронутый продукт Sublime...

CVE-2025-56503: Incorrect Privilege Assignment

An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the...

CVE-2024-25255

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

CVE-2024-25255

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

CVE-2024-25255: Improper Neutralization of Special Elements used in a Command

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

CVE-2024-25255

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

CVE-2024-25255

Sublime Text 4 contains a command injection vulnerability (CWE-77) within the New Build System module . While the vulnerability is documented, multiple third parties have reported this behavior as intended. As a temporary workaround, users are advised to consider disabling the New Build System mo...