P5 Verified
xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
CVE-2026-94422. EPSS 0.00693 (percentile 0.5125), scored 2026-10-03. Fixed version: 72b40c8f6d9d585cfbdb249690724f740d207087. Fixed version: e4465a0dfe96da3b39929a30a1ac3a22b16223e3. Fixed version: e5702fca4dba9600721921fbca2dbc39dc5ca400. Fixed version: fc027f759316fb2a6c45648200b6f100202eb84e.
- CVE / CWE
- CVE-2026-94422 /
- Vendor / product
- Unavailable / Unavailable
- Severity
- 0.2
- CVSS
- Unavailable · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N · osv
- EPSS
- 0.00693 · percentile 0.5125 · 2026-10-03
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
- Product unavailable · Fixed version: 72b40c8f6d9d585cfbdb249690724f740d207087
- Product unavailable · Fixed version: e4465a0dfe96da3b39929a30a1ac3a22b16223e3
- Product unavailable · Fixed version: e5702fca4dba9600721921fbca2dbc39dc5ca400
- Product unavailable · Fixed version: fc027f759316fb2a6c45648200b6f100202eb84e
Provenance
- OSV.dev · Source record · observed 2026-10-04 07:06:47.357040+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-94422.html