AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-17526

HIGH · CVSS 8.8 EPSS 1.22%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-12-14 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2017-17526
Severity
HIGH
CVSS
8.8
EPSS
1.22%

Original NVD Description

Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.