https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:31:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-338105 EUVD-2026-338105 https://cve.radiocsirt.org/vuln/euvd-2026-338105 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62294 <p>Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a symlink and cause Flameshot to write PNG data through it, overwriting any file the victim user could write. This issue is fixed in version 14.0.0.</p> <p>Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a symlink and cause Flameshot to write PNG data through it, overwriting any file the victim user could write. This issue is fixed in version 14.0.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-62294 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-62294 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: flameshot, Ubuntu:20.04:LTS: flameshot, Ubuntu:22.04:LTS: flameshot, Ubuntu:24.04:LTS: flameshot, Ubuntu:26.04:LTS: flameshot</p> <p>Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a symlink and cause Flameshot to write PNG data through it, overwriting any file the victim user could write. This issue is fixed in version 14.0.0.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: flameshot, Ubuntu:20.04:LTS: flameshot, Ubuntu:22.04:LTS: flameshot, Ubuntu:24.04:LTS: flameshot, Ubuntu:26.04:LTS: flameshot</p> <p>Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a symlink and cause Flameshot to write PNG data through it, overwriting any file the victim user could write. This issue is fixed in version 14.0.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-62294