CVE-2026-101258High· 7.8▾ TwilightA flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory cor…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-104036Medium· 5.8A flaw was found in SSSD's NFS idmap plugin
CVE-2026-103484High· 8.8IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.
CVE-2026-103531Medium· 5.5A flaw has been found in OpenSC up to 0.27.1
CVE-2026-103226Medium· 6.3A vulnerability was identified in Artifex Ghostscript up to 10.09.0
CVE-2026-95520High· 7.1A heap-based buffer overflow flaw was found in rpm
CVE-2026-19547High· 7.0Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking