Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/09/23 9:43 a.m.•38 views

CVE-2026-95627 Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution XSS can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no...

7.7CVSS0.00202EPSS
SaveExploits0References2
Rows per page
Query Builder