https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T13:08:44.607018+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-03240 cnvd-2018-03240 2026-10-10T13:08:44.708818+00:00 cnvd-2018-03240 https://cve.radiocsirt.org/vuln/euvd-2026-78452 EUVD-2026-78452 2026-10-10T13:08:44.708857+00:00 EUVD-2026-78452 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15108 fkie_cve-2017-15108 2026-10-10T13:08:44.708872+00:00

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.

 https://cve.radiocsirt.org/vuln/ghsa-rx22-vq3w-89rg GHSA-rx22-vq3w-89rg 2026-10-10T13:08:44.708900+00:00

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.

 https://cve.radiocsirt.org/vuln/gsd-2017-15108 gsd-2017-15108 2026-10-10T13:08:44.708916+00:00 gsd-2017-15108 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11399-1 openSUSE-SU-2024:11399-1 — spice-vdagent-0.21.0-1.7 on GA media 2026-10-10T13:08:44.708928+00:00

spice-vdagent-0.21.0-1.7 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:0372-1 SUSE-SU-2018:0372-1 — security update for spice-vdagent 2026-10-10T13:08:44.708945+00:00

security update for spice-vdagent

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15108 UBUNTU-CVE-2017-15108 2026-10-10T13:08:44.708961+00:00

Affected: Ubuntu:16.04:LTS: spice-vdagent, Ubuntu:18.04:LTS: spice-vdagent

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed.