PT-2025-50215

Name of the Vulnerable Software and Affected Versions Sublime Text versions prior to Build 3209 Description Sublime Text 3 is susceptible to a Dylib Injection issue on MacOS. An attacker can compile a dynamic library .dylib file and execute it within the Sublime Text application’s process. This...

CVE-2025-65741

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...

CVE-2025-56503

An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the...

EUVD-2025-50803

An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder...

CVE-2025-56503

An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the...

PT-2025-46189

Name of the Vulnerable Software and Affected Versions Sublime Text versions 4200 Description An issue in Sublime Text 4 version 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator. This is achieved by replacing the uninstall file with a crafted...

CVE-2025-56503: Incorrect Privilege Assignment

An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the...

CVE-2025-56503

An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the...

CVE-2025-56503

An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the...

CVE-2025-56503

An issue in Sublime Text 4 (version 4200) allows authenticated attackers with low-level privileges to perform local privilege escalation to Administrator. The vulnerability is triggered by replacing the uninstall file in the installation folder with a crafted binary . While the supplier disputes ...

Sublime Text 安全漏洞

Sublime Text is a cross-platform, extensible text editor from Sublime, Inc. A security vulnerability exists in Sublime Text version 4 4200 that originates from a low-privilege attacker who can replace uninstalled files in the installation folder, potentially resulting in elevated privileges...

EUVD-2017-17327

Malware in sbrugna...

CVE-2024-25255

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

CVE-2024-25255

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

PT-2024-20850 · Sublime Text · Sublime Text

Name of the Vulnerable Software and Affected Versions: Sublime Text version 4 Description: A command injection issue was found in Sublime Text via the New Build System module. It is noted that multiple third parties report this behavior as intended. Recommendations: For Sublime Text version 4, as...

CVE-2024-25255: Improper Neutralization of Special Elements used in a Command

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

CVE-2024-25255

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

Sublime Text 安全漏洞

Sublime Text is a cross-platform, extensible text editor from Sublime, Inc. A security vulnerability exists in Sublime Text version 4, which stems from a discovery via the New Build System module that contains a command injection vulnerability...

CVE-2024-25255

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties report that this is intended behavior...

CVE-2024-25255

Sublime Text 4 contains a command injection vulnerability (CWE-77) within the New Build System module . While the vulnerability is documented, multiple third parties have reported this behavior as intended. As a temporary workaround, users are advised to consider disabling the New Build System mo...