CVE-2026-108693 — Vulnerability intelligence
imagemagick — imagemagick
Published:
- CVSS
- 7.3
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with ImageMagick privileges when PDF, PostScript, or EPS files are converted.