Get real-time updates on Telegram
CVE-2026-23865: azl3 freetype 2.13.2-1 on Azure Linux 3.0 (exact versions not specified); +3 more affected products
CVE-2026-23865 affects azl3 freetype 2.13.2-1 on Azure Linux 3.0. CVSS 3.1 base score 5.3 (Microsoft Security Response Center). EPSS 0.00147 (percentile 0.03586), scored 24-Oct-2026. Fixed version: fc85a255849229c024c8e65f536fe1875d84841c.
Affected technology
azl3 freetype 2.13.2-1 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft
cbl2 freetype 2.13.1-2 on CBL Mariner 2.0 · Exact affected versions not specified by the source
Microsoft
cbl2 freetype 2.13.1-1 on CBL Mariner 2.0 · Exact affected versions not specified by the source
Microsoft
azl3 freetype 2.13.2-2 on Azure Linux 3.0 · Exact affected versions not specified by the source
Microsoft
Component: Not specified by the source
Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · No privileges required · User interaction required
What an attacker can do
Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.
- Product
- azl3 freetype 2.13.2-1 on Azure Linux 3.0
- CCR priority
- 21.2 /100 (P4)
- CVSS 3.1
- 5.3 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L · Microsoft Security Response Center
- EPSS
- 0.00147 · percentile 0.03586 · 2026-10-24
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- OSV.dev · Source record · observed 2026-10-24 16:38:25.544256+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23865.html