fscrypt vulnerabilities
1 known vulnerability in fscrypt from Google. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest first
- 7.3 High severity
fscrypt: Improper Neutralization of Special Elements used in an OS Command
The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privilege