CVE-2026-79079
Local Arbitrary Code Execution via URL Handling in CrossWire Xiphos <= 4.3.2
An issue in CrossWire Xiphos <= 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menu_popup.c components
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products