Re: CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX
Simon McVittie questions whether libextractor CVE-2026-100310 is a realistic setuid privilege escalation.
2 stories, newest first · one card per story
Simon McVittie questions whether libextractor CVE-2026-100310 is a realistic setuid privilege escalation.
GNU libextractor before 1.16 can be locally escalated via the LIBEXTRACTOR_PREFIX search path.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views