What’s Vulnerable › Vulnerabilities

CVE-2023-26314

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-22 · updated 2026-06-17

Description

The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter.

Affected products

• Debian Linux: 10.0
• Mono-Project Mono: 5.18.0.240+dfsg-3, 6.8.0.105+dfsg-3

References

• https://bugs.debian.org/972146
• https://lists.debian.org/debian-lts-announce/2023/02/msg00037.html
• https://www.openwall.com/lists/oss-security/2023/01/05/1
• http://www.openwall.com/lists/oss-security/2026/05/19/2
• http://www.openwall.com/lists/oss-security/2026/05/19/41
• https://bugs.debian.org/972146
• https://lists.debian.org/debian-lts-announce/2023/02/msg00037.html
• https://www.openwall.com/lists/oss-security/2023/01/05/1

Get alerted when CVE-2023-26314 or the next vulnerability affects your stack