CVE-2026-40505Low· 3.3▾ SunlitMuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata tha…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running mutool info, enabling them to manipulate terminal display for social engineering attacks such as presenting fake prompts or spoofed commands.
MuPDF < 1.27.0MuPDF 0f17d789fe8c29b41e47663be82514aaca3a4dfbRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-7233Low· 3.3Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds
CVE-2026-112036Medium· 4.3Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free
CVE-2025-71382Medium· 6.5MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elem…
CVE-2026-92413Medium· 4.3A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9
CVE-2026-47090Medium· 4.6Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks
CVE-2026-123847Medium· 5.3In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion