CVE-2024-3566

No fix known EPSS 7%CVSS 9.8

A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.

Published 2024-04-10 · CVE record · OSV

Products: Node.js, Go Programming Language GoLang, Haskell Programming Language Haskel, nodejs, haskell process_library, rust-lang rust, thephpgroup, yt-dlp_project yt-dlp