https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:07:08.556047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-12560 cnvd-2018-12560 2026-10-09T21:07:08.559725+00:00 cnvd-2018-12560 https://cve.radiocsirt.org/vuln/euvd-2026-66186 EUVD-2026-66186 2026-10-09T21:07:08.559760+00:00 EUVD-2026-66186 https://cve.radiocsirt.org/vuln/fkie_cve-2018-13054 fkie_cve-2018-13054 2026-10-09T21:07:08.559775+00:00

An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content.

 https://cve.radiocsirt.org/vuln/ghsa-6g5m-97v8-hh8j GHSA-6g5m-97v8-hh8j 2026-10-09T21:07:08.559805+00:00

An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content.

 https://cve.radiocsirt.org/vuln/gsd-2018-13054 gsd-2018-13054 2026-10-09T21:07:08.559823+00:00 gsd-2018-13054 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-13054 UBUNTU-CVE-2018-13054 2026-10-09T21:07:08.559834+00:00

Affected: Ubuntu:Pro:16.04:LTS: cinnamon, Ubuntu:Pro:18.04:LTS: cinnamon

An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content.