CVE-2023-36664High· 7.8▾ MidnightPoC availableArtifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.8 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Aug 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.2%
3.2% → 4.3%
4 GitHub repos
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
ghostscript < 10.01.2debian_linux = 11.0debian_linux = 12.0fedora = 37fedora = 38Upgrade past the affected range:
ghostscript 10.01.2Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112177High· 7.3Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8
CVE-2021-45949Medium· 5.5Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp).
CVE-2026-101258High· 7.8A flaw was found in Ghostscript
CVE-2026-103226Medium· 6.3A vulnerability was identified in Artifex Ghostscript up to 10.07.0
CVE-2026-19547High· 7.0Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking
CVE-2026-39919Critical· 9.8Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 imag…