| ID | CVE-2026-50292 | ||||||
| Sažetak | In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution | ||||||
| Reference | |||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | ||||||
| Zadnje važnije ažuriranje | 05-06-2026 - 21:06 | ||||||
| Objavljeno | 04-06-2026 - 18:16 |
