CVE-2000-0844
NoneCVSS
—
EPSS
15.6%
Published
Nov 14, 2000
CISA due date
—
The record
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-101184 Permission control vulnerability in the Bluetooth module. CWE-264
- CVE-2026-101176 Permission control vulnerability in the event notification management module. CWE-264
- CVE-2026-101177 Permission control vulnerability in the Optimizer module. CWE-264
- CVE-2026-101172 Permission control vulnerability in the graphics module. Impact: Successful exploitation… CWE-264
- CVE-2026-101171 Permission control vulnerability in the background task management module. CWE-264
- CVE-2026-116367 A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. CWE-264
- CVE-2026-81644 DoS vulnerability in the preview service module. CWE-264
- CVE-2026-49315 DoS vulnerability in the input device module. CWE-264