CVE-2026-48831
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-48831
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/V:D/U:Clear
Source: CVE Program / CVE List V5
Vulnerability Type
在范围间的资源转移不正确
Source: CVE Program / CVE List V5
Vulnerability Title
WineHQ Wine 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WineHQ Wine是WineHQ开源的一个兼容层软件，可在类Unix系统上运行Windows应用程序。 WineHQ Wine存在安全漏洞，该漏洞源于注册为EXE文件MIME处理器的.desktop文件，可能导致EXE文件被盲目执行，从而逃逸Flatpak和Snap沙箱。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-48831
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-48831
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-48831 (1)
Other References for CVE-2026-48831 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2026-48831
No comments yet