CVE-2021-3781

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20 CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Feb 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-378197.5PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.CVE-2021-37826.6An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is CVE-2021-378234.9OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background.CVE-2021-37836.1yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-378329.8A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious atta CVE-2021-378336.1A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows fo CVE-2021-378394.3Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. T CVE-2021-37847.0Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating user CVE-2021-378408.8aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webs CVE-2021-378417.8Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Wind CVE-2021-378427.5metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials can get leaked in debu CVE-2021-378439.8The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the username is known (i.e.