CVE-2026-90773lowCWE-150

CVE-2026-90773: low-severity vulnerability in dalance procs

procs through 0.14.12 Terminal Escape Sequence Injection via Command

Published · Updated

Follow this CVE+ Monitor procs+ Monitor rust-procs

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.4epss 0.1%
procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
Affected products
dalance · procs