Threats tagged 'ghsa-7c2r-g494-h73x'

CVE-2026-81574 is a high-severity vulnerability in Wibu-Systems-AG CodeMeter Runtime before versions 8.41a and 9.10. The logger component does not sanitize input strings properly, allowing attackers to inject printf-style format specifiers. This can cause the application to crash and potentially disclose sensitive information such as process memory and stack canaries. The vulnerability can be exploited locally by setting proxy values and remotely when combined with another vulnerability (CVE-2026-81573).