CVE-2026-86712

Publié : 8 septembre 2026

Modifié : 8 septembre 2026

Score CVSS

8.8

HIGH

Description détaillée

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected scripts execute with full Node.js access through the Electron main process.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Références et Patchs

https://github.com/siyuan-note/siyuan https://github.com/siyuan-note/siyuan/blob/v3.8.1/app/src/protyle/util/paste.ts https://github.com/siyuan-note/siyuan/commit/9ce660652de2ced26ec2d98a5a242cb0b8bb7273 https://github.com/siyuan-note/siyuan/releases/tag/v3.8.2 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-9rr9-pxr4-gcgc https://www.vulncheck.com/advisories/siyuan-before-3.8.2-remote-code-execution-via-clipboard

Dernières Vulnérabilités

CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbed page.

VOIR DÉTAILS

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.

VOIR DÉTAILS

CVE-2026-77106

Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.

VOIR DÉTAILS