Mmastodon TechnologyCybersecurity first seen 21 h ago, last 21 h ago, peak #11

ImageMagick Windows flaw lets malicious Ghostscript binary execute

Original: CVE-2026-108693 is an uncontrolled search path flaw in ImageMagick on Windows. A malicious Ghostscript binary planted in

CVE-2026-108693 is an uncontrolled search path vulnerability in ImageMagick on Windows. A malicious Ghostscript binary planted in the working directory can execute with ImageMagick's privileges when PDF, PostScript, or EPS files are converted. Versions through 7.1.2-33 and 6.9.13-58 are affected, and users are being urged to update to a patched release.

Why now: A newly disclosed security vulnerability in the widely used ImageMagick tool poses practical code execution risk on Windows systems.

ImageMagickGhostscriptCVE-2026-108693Microsoft Windows

Open on mastodon →

Evidence

• CVE-2026-108693 is an uncontrolled search path flaw in ImageMagick on Windows. A malicious Ghostscript binary planted in the working directory can run with ImageMagick privileges when PDF, PostScript, or EPS files are converted. Affected: through 7.1.2-33 and 6.9.13-58. Update… · suriq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1806136