CVE-2026-86422

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or write policy-denied files.

Scoring

Severity

LOW

CVSS base score

3.3

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

EPSS probability

0.11%

CWE

CWE-59

Published

2026-09-07

Last modified

2026-09-07

Affected products

• ImageMagick ImageMagick
• ImageMagick ImageMagick
• ImageMagick ImageMagick

Weakness type

• CWE-59

Related vulnerabilities

• CVE-2026-87766 — Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
• CVE-2026-78622 — Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
• CVE-2026-81963 — Windows Update Stack Elevation of Privilege Vulnerability
• CVE-2026-69425 — Windows NTFS Tampering Vulnerability
• CVE-2026-69289 — Windows Setup Files Cleanup Elevation of Privilege Vulnerability
• CVE-2026-83999 — Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
• CVE-2026-70563 — Windows Shell Spoofing Vulnerability
• CVE-2026-69771 — Windows Container Manager Service Security Feature Bypass Vulnerability

Markdown version · Browse all CVEs