Threats Tagged 'brew-yewtube-cve-2026-50023'
View all threats tagged with 'brew-yewtube-cve-2026-50023'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'brew-yewtube-cve-2026-50023'
Click on any threat for detailed analysis and mitigation recommendations
0 A vulnerability in yt-dlp allows remote attackers to write arbitrary OS-shortcut files (.desktop, .url, .webloc) to the user's filesystem by bypassing the previous fix for CVE-2024-38519. This occurs because the allowlist for file extensions included unsafe shortcut file types to preserve functionality, which attackers can exploit via crafted media manifests. The malicious shortcut files can be disguised as subtitle or media files, potentially leading to social engineering attacks or arbitrary code execution. The issue is fixed in yt-dlp version 2026.06.09 by removing these extensions from the global allowlist except within the intended context. Users are advised to upgrade or apply strict usage restrictions if unable to update. Join the discussion | GCVE Database | 08/13/2026, 17:14:32 UTC Added: 09/18/2026, 01:05:42 UTC |
Showing 1 to 1 of 1 result