Access Control

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass…CVE-2019-14869Ghostscript · CVSS 7.3 · 3.1% likely

   CWE-648

2. It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in or…CVE-2019-3838The ghostscript Project · CVSS 7.3 · 2.5% likely

   CWE-648

3. It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to,…CVE-2019-3835The ghostscript Project · CVSS 7.3 · 2.5% likely

   CWE-648

4. In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could ab…CVE-2019-10216ghostscript · CVSS 7.3 · 2.3% likely

   CWE-648

5. It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this…CVE-2019-3839The ghostscript Project · CVSS 7.3 · 1.7% likely

   CWE-648

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.