https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T12:17:23.350314+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-00687 cnvd-2018-00687 2026-10-22T12:17:23.501278+00:00 cnvd-2018-00687 https://cve.radiocsirt.org/vuln/euvd-2026-79582 EUVD-2026-79582 2026-10-22T12:17:23.501360+00:00 EUVD-2026-79582 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17528 fkie_cve-2017-17528 2026-10-22T12:17:23.501379+00:00

backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-h6vw-h7mg-64xm GHSA-h6vw-h7mg-64xm 2026-10-22T12:17:23.501438+00:00

backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2017-17528 gsd-2017-17528 2026-10-22T12:17:23.501468+00:00 gsd-2017-17528 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11375-1 openSUSE-SU-2024:11375-1 — scummvm-2.2.0-3.3 on GA media 2026-10-22T12:17:23.501498+00:00

scummvm-2.2.0-3.3 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17528 UBUNTU-CVE-2017-17528 2026-10-22T12:17:23.501536+00:00

Affected: Ubuntu:16.04:LTS: scummvm, Ubuntu:18.04:LTS: scummvm, Ubuntu:20.04:LTS: scummvm, Ubuntu:22.04:LTS: scummvm, Ubuntu:24.04:LTS: scummvm, Ubuntu:25.10: scummvm, Ubuntu:26.10: scummvm, Ubuntu:26.04:LTS: scummvm

backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.