Yüksek CVSS 8.8
CVE-2026-5674: CVE-2026-5674: güvenlik açığı
Açıklama (NVD)
A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library, leading to arbitrary code execution outside the sandbox and potential compromise of the user's system.
Özet bilgiler
- CVSS v3.1
- 8.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - EPSS
- %0,19 (yüzdelik 8)
- CWE
- CWE-427
- Yama
- Yok / bilinmiyor