CVE-2026-7006

Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...

EUVD-2026-82982

Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...

CVE-2026-7006 Sublime Text 4192/3207 Local Privilege Escalation via Update Staging Mechanism

Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...

CVE-2026-7006

Sublime Text for Windows (Build 4192 / ST4 and Build 3207 / ST3) is vulnerable to a local privilege escalation via its update staging mechanism . An unprivileged local attacker can place a malicious DLL in the user-writable staging directory under %LOCALAPPDATA%, mark it read-only to bypass clean...