Lucene search
+L

5 matches found

EUVD
EUVD
•added 2026/11/10 12:31 a.m.•5 views

EUVD-2026-120559

Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gsfonts.ps, which calls the privileged .forceput operator without checking operand types. Attackers can supply crafted PostScript or PDF documents that trigger a type error, recover .forceput vi...

8.5CVSS7.2AI score0.0013EPSS
SaveExploits0References6
NVD
NVD
•added 2026/11/10 12:17 a.m.•5 views

CVE-2026-125396

Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gsfonts.ps, which calls the privileged .forceput operator without checking operand types. Attackers can supply crafted PostScript or PDF documents that trigger a type error, recover .forceput vi...

8.5CVSS0.0013EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/10 12:00 a.m.•5 views

CVE-2026-125396: ArtifexSoftware ghostpdl: Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gs_fonts.ps,…

Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gsfonts.ps, which calls the privileged .forceput operator without checking operand types. Attackers can supply crafted PostScript or PDF documents that trigger a type error, recover .forceput vi...

8.5CVSS7.2AI score0.0013EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/09 11:28 p.m.•15 views

CVE-2026-125396

Ghostscript versions before 10.08.0 are vulnerable to a -dSAFER bypass in the .putgstringcopy procedure within gs_fonts.ps. The root cause is the call to the privileged .forceput operator without proper operand type checking. An attacker can provide crafted PostScript or PDF documents to trigger ...

8.5CVSS7.2AI score0.0013EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/11/09 11:28 p.m.•4 views

CVE-2026-125396 Ghostscript before 10.08.0 -dSAFER Bypass via .putgstringcopy .forceput Recovery

Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gsfonts.ps, which calls the privileged .forceput operator without checking operand types. Attackers can supply crafted PostScript or PDF documents that trigger a type error, recover .forceput vi...

8.5CVSS0.0013EPSS
SaveExploits0References5
Rows per page
Query Builder