SUSE CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

CVE-2026-19547

A flaw was found in Ghostscript. In Windows environments, the application searches for PostScript resource files in predictable directory paths that do not exist by default. An authenticated local user can exploit this issue by creating the required directory structure and planting a malicious...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

UBUNTU-CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

EUVD-2026-88701

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

CVE-2026-19547 Local Privilege Escalation in Ghostscript for Windows

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation via PostScript resource file hijacking. The application searches for files in predictable paths under **C:\gs*, which do not exist by default. Because Windows default ACLs allow authenticated users to create directories at the ro...

CVE-2026-19547 Local Privilege Escalation in Ghostscript for Windows

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

ROOT-OS-ALPINE-317-CVE-2024-33871 CVE-2024-33871 in ghostscript - Patched by Root

Root has patched CVE-2024-33871 in the ghostscript package for Root:Alpine:3.17. Multiple fixed versions available...

CVE-2026-19547: Untrusted Search Path

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

ROOT-OS-DEBIAN-13-CVE-2026-39919 CVE-2026-39919 in ghostscript - Patched by Root

Root has patched CVE-2026-39919 in the ghostscript package for Root:Debian:13. Multiple fixed versions available...

[SECURITY] [DSA 6516-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6516-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 25, 2026 https://www.debian.org/security/faq -...

Debian dsa-6516 : ghostscript - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6516 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6516-1 [email protected] https://www.debian.org/security/...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Ghostscript vulnerability (USN-8791-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8791-1 advisory. It was discovered that Ghostscript incorrectly handled JPEG 2000 image components with mismatched subsampling factors. An attacker could...

PT-2026-97239

Name of the Vulnerable Software and Affected Versions Ghostscript for Windows versions prior to 10.08.0 Description Ghostscript for Windows allows local privilege escalation via PostScript resource file hijacking. The application searches for resource files in predictable paths under C:gs that ar...

TencentOS Server 4: ghostscript (TSSA-2026:1047)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1047 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2023-004048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-004048 advisory. Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. Tenable has extracted th...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2022-001763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001763 advisory. A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer...