Do Son A critical Ghostscript vulnerability, CVE-2026-39919 (CVSS 9.8), allows remote code execution via crafted PDFs. Update Ghostscript to 10.08.0 now.
Ghostscript
A Ghostscript buffer overflow enables unauthenticated remote code execution. Patch this Ghostscript buffer overflow flaw (CVE-2026-39919) immediately.
WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.
A Ghostscript vulnerability (CVE-2025-48708) embeds plaintext passwords in encrypted PDF files, undermining document security. Update now!
The high CVSS scores associated with several of these flaws (CVE-2025-27832, CVE-2025-27831, CVE-2025-27836, and CVE-2025-27837 all with a CVSS of 9.8)
Learn about the security vulnerabilities in Ghostscript and the potential risks they pose. Stay secure by updating to the latest version.
Given the critical nature of these vulnerabilities, it is imperative for all Ghostscript users to update to version 10.03.1 immediately
NIST has assigned CVE-2020-36773 a base score of 9.8 (out of 10) under the CVSS v3.1 system, classifying it as "Critical."
High-severity flaw in Ghostscript tagged as CVE-2023-36664 could allow an attacker to take over a routine and even execute commands on systems