CVE-2026-46529

PDF argvインジェクションによるRCE（CVE-2026-46529）（atril/xreader/evince） evspawn（shell/ev-application.c）におけるargvインジェクションの実動するProof-of-Conceptです。細工されたPDFのレンダリングページ上の任意の場所を一度クリックすると、ビューアを実行中のユーザーとして任意のコードが実行されます。...

Oracle Linux 8 : evince (ELSA-2026-28998)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28998 advisory. - Fix CVE-2026-46529: quote string arguments passed to evspawn Tenable has extracted the preceding description block directly from the Oracle Linux security...

evince security update

3.28.4-17 - Fix CVE-2026-46529: quote string arguments passed to evspawn - Resolves: RHEL-184039...

CVE-2026-46529: Improper Neutralization of Special Elements used in a Command

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tricking them into clicking a link inside...