CVE-2026-40853CWE-79

CVE-2026-40853: falha em Apache XML Graphics Batik

Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont

Publicada em

Seguir esta CVE+ Monitorar Apache XML Graphics Batik

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

0Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Track
A Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
Produtos afetados
Apache Software Foundation · Apache XML Graphics Batik
CVEs relacionadas — Apache XML Graphics Batik

No mesmo produto, das mais perigosas para as menos.

CVE-2022-44729—Apache XML Graphics Batik: Information disclosure vulnerabilityEPSS 0.9%CVE-2022-44730—Apache XML Graphics Batik: Information disclosure vulnerabilityEPSS 0.8%CVE-2026-89326—Apache XML Graphics Batik: Check url protocol when loading documentEPSS —CVE-2026-44929—SSRF Vulnerability in Apache BatikEPSS —CVE-2026-49236—Apache XML Graphics Batik: SVG color-profile xml:base bypasses Batik external resource same-origin checksEPSS —CVE-2026-111792—Apache XML Graphics Batik: Denial of Service via SVG Element Reference ResolutionEPSS —