CVE-2026-73227

Publié : 11 août 2026

Modifié : 11 août 2026

Score CVSS

8.1

HIGH

Description détaillée

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in src/client/components/rdp/file-transfer.js passes the server-controlled CLIPRDR filename fileInfo.name to osResolve without sanitization. This issue is fixed in version 3.15.120.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Références et Patchs

https://github.com/electerm/electerm/commit/451bf3000672c00b0c3b148fbf3c148c205ce350 https://github.com/electerm/electerm/releases/tag/v3.15.120 https://github.com/electerm/electerm/security/advisories/GHSA-gm6q-5vpx-3mwf

Dernières Vulnérabilités

CVE-2026-73283

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

VOIR DÉTAILS

CVE-2026-73282

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

VOIR DÉTAILS

CVE-2026-73281

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

VOIR DÉTAILS