← Back

Cygwin

cygwin

Vendor: Cygwin • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-7523
1Cygwin
1Cygwin
May 13, 2026
Jul 21, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process r...Show more
Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.Show less
CVE-2016-3067
1Cygwin
1Cygwin
May 13, 2026
Apr 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.