https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:10:54.117060+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03223 bdu:2019-03223 2026-10-03T06:10:54.132225+00:00 bdu:2019-03223 https://cve.radiocsirt.org/vuln/bell-cve-2019-10216 Withdrawn: BELL-CVE-2019-10216 — CVE-2019-10216 does not affect BellSoft software 2026-10-03T06:10:54.132272+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2019-31331 cnvd-2019-31331 2026-10-03T06:10:54.132299+00:00 cnvd-2019-31331 https://cve.radiocsirt.org/vuln/euvd-2026-53449 EUVD-2026-53449 2026-10-03T06:10:54.132321+00:00 EUVD-2026-53449 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10216 fkie_cve-2019-10216 2026-10-03T06:10:54.132343+00:00

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.

 https://cve.radiocsirt.org/vuln/ghsa-9xw2-pr37-vhp5 GHSA-9xw2-pr37-vhp5 2026-10-03T06:10:54.132391+00:00

It was found that the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.

 https://cve.radiocsirt.org/vuln/gsd-2019-10216 gsd-2019-10216 2026-10-03T06:10:54.132421+00:00 gsd-2019-10216 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2139-1 openSUSE-SU-2019:2139-1 — Security update for ghostscript 2026-10-03T06:10:54.132439+00:00

Security update for ghostscript

 https://cve.radiocsirt.org/vuln/rhsa-2019:2534 RHSA-2019:2534 — Red Hat Security Advisory: Red Hat 3scale API Management 2.6.0 release and security update 2026-10-03T06:10:54.132469+00:00

ghostscript: -dSAFER escape via .buildfont1 (701394) ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445) ghostscript: Safer mode bypass by .forceput exposure in setuserparams (701444) ghostscript: Safer mode bypass by .forceput exposure in setsystemparams (701443) ghostscript: Safer mode bypass by .forceput exposure in .pdfexectoken and other procedures (701450) 3scale: user session cookie does not set HTTPOnly

 https://cve.radiocsirt.org/vuln/suse-su-2019:2347-1 SUSE-SU-2019:2347-1 — Security update for ghostscript 2026-10-03T06:10:54.132511+00:00

Security update for ghostscript

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10216 UBUNTU-CVE-2019-10216 2026-10-03T06:10:54.132539+00:00

Affected: Ubuntu:16.04:LTS: ghostscript, Ubuntu:18.04:LTS: ghostscript

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.