CVE-2026-50292

Опубликовано: 09 июн. 2026

Источник: msrc

CVSS3: 7.4

EPSS Низкий

Описание

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

EPSS

Процентиль: 24%

0.00313

Низкий

7.4 High

CVSS3

Связанные уязвимости

CVE-2026-50292

CVSS3: 7.4

ubuntu

около 2 месяцев назад

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

CVE-2026-50292

CVSS3: 6.7

redhat

около 2 месяцев назад

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

CVE-2026-50292

CVSS3: 7.4

nvd

около 2 месяцев назад

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

CVE-2026-50292

CVSS3: 7.4

debian

около 2 месяцев назад

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-gr ...

RLSA-2026:39296

rocky

16 дней назад

Moderate: libinput security update

EPSS

Процентиль: 24%

0.00313

Низкий

7.4 High

CVSS3