CVE catalog

CVE-2023-52076

atril: CVE-2023-52076

[CVE catalog]

Severity
High · CVSS 8.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.08% · Oct 25, 2026

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The only limitation is that this vulnerability cannot be exploited to overwrite existing files, but that doesn't stop an attacker from achieving Remote Command Execution on the target system. Version 1.26.2 of Atril contains a patch for this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianatrilsid1.28.4-1fixed
Debianatrilforky1.28.4-1fixed
Debianatriltrixie1.26.2-4+deb13u1fixed
Debianatriltrixie-security1.26.2-4+deb13u1fixed
Debianatrilbookworm1.26.0-2+deb12u4fixed
Debianatrilbookworm-security1.26.0-2+deb12u4fixed
Ubuntuatrilpro1.18.1-1vulnerable
Ubuntuatrilpro1.18.3-1vulnerable
Ubuntuatrilpro1.19.6-0ubuntu1vulnerable
Ubuntuatrilpro1.20.0-0ubuntu1vulnerable
Ubuntuatrilpro1.20.1-0ubuntu1vulnerable
Ubuntuatrilpro1.20.1-1vulnerable
Ubuntuatrilpro1.20.1-2ubuntu1vulnerable
Ubuntuatrilpro1.20.1-2ubuntu2vulnerable
Ubuntuatrilpro1.20.1-2ubuntu2+esm1fixed
Ubuntuatril20.041.22.2-0ubuntu1vulnerable
Ubuntuatril20.041.24.0-0ubuntu1vulnerable
Ubuntuatril20.041.24.0-1vulnerable
Ubuntuatril20.041.24.0-1ubuntu0.1fixed
Ubuntuatril22.041.26.0-0ubuntu1vulnerable
Ubuntuatril22.041.26.0-1ubuntu1vulnerable
Ubuntuatril22.041.26.0-1ubuntu1.1fixed
Ubuntuatrilpro1.18.1-1vulnerable
Ubuntuatrilpro1.18.3-1vulnerable
Ubuntuatrilpro1.19.6-0ubuntu1vulnerable
Ubuntuatrilpro1.20.0-0ubuntu1vulnerable
Ubuntuatrilpro1.20.1-0ubuntu1vulnerable
Ubuntuatrilpro1.20.1-1vulnerable
Ubuntuatrilpro1.20.1-2ubuntu1vulnerable
Ubuntuatrilpro1.20.1-2ubuntu2vulnerable
Ubuntuatrilpro1.20.1-2ubuntu2+esm1fixed
Ubuntuatril20.041.22.2-0ubuntu1vulnerable
Ubuntuatril20.041.24.0-0ubuntu1vulnerable
Ubuntuatril20.041.24.0-1vulnerable
Ubuntuatril20.041.24.0-1ubuntu0.1fixed
Ubuntuatril22.041.26.0-0ubuntu1vulnerable
Ubuntuatril22.041.26.0-1ubuntu1vulnerable
Ubuntuatril22.041.26.0-1ubuntu1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianatrilsourcesid1.26.2-1not yet assignedNot reported[1061522]
Debianatrilsourceforky1.26.2-1not yet assignedNot reported[1061522]
Debianatrilsourcetrixie1.26.2-1not yet assignedNot reported[1061522]
Debianatrilsourcebookworm1.26.0-2+deb12u3not yet assignedNot reported[1061522]
Ubuntuatrildebpro1.20.1-2ubuntu2+esm1Not reportedUSN-6808-1Not reported
Ubuntuatrildeb20.041.24.0-1ubuntu0.1Not reportedUSN-6808-1Not reported
Ubuntuatrildeb22.041.26.0-1ubuntu1.1Not reportedUSN-6808-1Not reported
Ubuntuatrildebpro1.20.1-2ubuntu2+esm1Not reportedUBUNTU-CVE-2023-52076Not reported
Ubuntuatrildeb20.041.24.0-1ubuntu0.1Not reportedUBUNTU-CVE-2023-52076Not reported
Ubuntuatrildeb22.041.26.0-1ubuntu1.1Not reportedUBUNTU-CVE-2023-52076Not reported

[Debian bug #1061522]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]