CVE-2025-70888

Опубликовано: 25 мар. 2026

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

Ссылки

https://github.com/mtrojnar/osslsigncode/issues/475
Issue Tracking
Third Party Advisory
https://github.com/mtrojnar/osslsigncode/pull/477
Issue Tracking
https://github.com/ralphje/signify/issues/60
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:osslsigncode_project:osslsigncode:*:*:*:*:*:*:*:*

Версия до 2.10 (включая)

EPSS

Процентиль: 39%

0.00482

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVE-2025-70888

CVSS3: 9.8

ubuntu

5 месяцев назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

CVE-2025-70888

CVSS3: 10

redhat

5 месяцев назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

CVE-2025-70888

msrc

5 месяцев назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component

CVE-2025-70888

CVSS3: 9.8

debian

5 месяцев назад

An issue in mtrojnar Osslsigncode affected at v2.10 and before allows ...

openSUSE-SU-2026:20473-1

suse-cvrf

4 месяца назад

Security update for osslsigncode

EPSS

Процентиль: 39%

0.00482

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-269