CVE-2019-6116
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Published
- Mar 19, 2019
- Updated
- Aug 4, 2024
- Assigning CNA
- mitre
- Evidence observed
- Jan 24, 2019
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HModerate · next 30 days
- Percentile
- 98.7%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
Sources
ghostscript/CVE-2019-6116
GhostScript Sandbox Bypass Command Execution (CVE-2019-6116)
Vulhub vulnerability labsDeclared conditions
- lab image version: vulhub/imagemagick:7.0.8-27-php(ghostscript/CVE-2019-6116/docker-compose.yml:services.web.image)
Google Security Research · linux · Jan 24, 2019
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.