evince-cve-2017-1000083

This repository does not have a README...

document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDF Clickable Link RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for document viewer link-handler risk, including impact analysis, remediation, and mitigation strategy. 📍 Report Snapshot...

CVE-2018-17961

build the image run the container with port forwarding ssh -X into it run evince executeonlybypass.ps check exploit has written into /.bashrc...

CVE-2026-46529

RCE via PDF argv injection CVE-2026-46529 atril/xreader/evince Working proof-of-concept for the argv injection in evspawn shell/ev-application.c. A single click anywhere on the rendered page of a crafted PDF triggers arbitrary code execution as the user running the viewer. This release uses the...

CVE-2026-63729

A flaw was found in the SyncTeX parser, part of TeX Live and used by applications like GNOME Evince. A remote attacker could exploit a heap use-after-free vulnerability by providing a specially crafted SyncTeX file e.g., .synctex or .synctex.gz. This could lead to application crashes or, in sever...

OPENSUSE-SU-2026:11412-1 evince-48.4-2.1 on GA media

These are all security issues fixed in the evince-48.4-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-63729

The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. ...

RHSA-2026:43398 Red Hat Security Advisory: evince security update

Bulletin has no description...

RHSA-2026:42692 Red Hat Security Advisory: evince security update

Bulletin has no description...

RHSA-2026:41904 Red Hat Security Advisory: evince security update

Bulletin has no description...

Important: Red Hat Security Advisory: evince security update

An update for evince is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

Important: Red Hat Security Advisory: evince security update

An update for evince is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

DEBIAN-CVE-2026-63729

The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. ...

EUVD-2026-46144

The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. ...

RHEL 8 : evince (RHSA-2026:42692)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:42692 advisory. The evince packages provide a simple multi-page document viewer for Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS files,...

PT-2026-61819

Name of the Vulnerable Software and Affected Versions TeX Live affected versions not specified GNOME Evince affected versions not specified Description The SyncTeX parser synctex parser.c contains a heap use-after-free issue. This occurs when a malformed .synctex or .synctex.gz file constructs a...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

Important: Red Hat Security Advisory: evince security update

An update for evince is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...