<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T09:03:23.466618+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/alsa-2025:7427</id>
    <title>ALSA-2025:7427 — Low: xterm security update</title>
    <updated>2026-10-03T09:03:23.702409+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> AlmaLinux:9: xterm, AlmaLinux:9: xterm-resize</p>
<p>The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly.</p>
<p>Security Fix(es):</p>
<p>* xterm: code execution via OSC 50 input sequences (CVE-2022-45063)</p>
<p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/alsa-2025:7427"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2023-04813</id>
    <title>bdu:2023-04813</title>
    <updated>2026-10-03T09:03:23.702473+00:00</updated>
    <content>bdu:2023-04813</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2023-04813"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-288357</id>
    <title>EUVD-2026-288357</title>
    <updated>2026-10-03T09:03:23.702491+00:00</updated>
    <content>EUVD-2026-288357</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-288357"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2022-45063</id>
    <title>fkie_cve-2022-45063</title>
    <updated>2026-10-03T09:03:23.702503+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2022-45063"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-3cch-wj7f-8g8x</id>
    <title>GHSA-3cch-wj7f-8g8x</title>
    <updated>2026-10-03T09:03:23.702526+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-3cch-wj7f-8g8x"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2022-45063</id>
    <title>gsd-2022-45063</title>
    <updated>2026-10-03T09:03:23.702542+00:00</updated>
    <content>gsd-2022-45063</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2022-45063"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2022-45063</id>
    <title>msrc_CVE-2022-45063 — xterm before 375 allows code execution via font ops e.g. because an OSC 50 response may have Ctrl-g and therefore lead…</title>
    <updated>2026-10-03T09:03:23.702553+00:00</updated>
    <content>msrc_CVE-2022-45063</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2022-45063"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2024-2236</id>
    <title>OESA-2024-2236 — xterm security update</title>
    <updated>2026-10-03T09:03:23.702571+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: xterm</p>
<p>The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals.

Security Fix(es):

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.(CVE-2022-45063)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2024-2236"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2024:12505-1</id>
    <title>openSUSE-SU-2024:12505-1 — xterm-375-2.1 on GA media</title>
    <updated>2026-10-03T09:03:23.702593+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>xterm-375-2.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2024:12505-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2023:0173-1</id>
    <title>SUSE-SU-2023:0173-1 — Security update for xterm</title>
    <updated>2026-10-03T09:03:23.702609+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for xterm</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2023:0173-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45063</id>
    <title>UBUNTU-CVE-2022-45063</title>
    <updated>2026-10-03T09:03:23.702625+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:16.04:LTS: xterm, Ubuntu:18.04:LTS: xterm, Ubuntu:20.04:LTS: xterm, Ubuntu:22.04:LTS: xterm</p>
<p>xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45063"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2021</id>
    <title>WID-SEC-W-2022-2021 — xterm: Schwachstelle ermöglicht Codeausführung</title>
    <updated>2026-10-03T09:03:23.702648+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in xterm ausnutzen, um beliebigen Programmcode auszuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2021"/>
  </entry>
</feed>
