CVE-2014-5255

HIGH · CVSS 7 EPSS 0.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-11-21 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-5255

Severity

HIGH

CVSS

EPSS

0.37%

Original Filing — NVD Description

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.