CVE-2026-48831
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several...
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
- Record
CVE-2026-48831- CVSS 4.0
- 7.3 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/V:D/U:Clear - Weakness
- CWE-669
- Updated
- 2026-11-02
EUVDEUVD-2026-31599
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
- Record
EUVD-2026-31599- CVSS 4.0
- 7.3 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/V:D/U:Clear - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-h8w5-58rh-75vr
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several...
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
- Record
GHSA-h8w5-58rh-75vr- CVSS 4.0
- 7.3 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:Clear - Weakness
- CWE-669
- Updated
- 2026-11-02
NVD
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
- Record
CVE-2026-48831- CVSS 4.0
- 7.3 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:Clear - Weakness
- CWE-669
- Updated
- 2026-11-02
OSV
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
- Record
CVE-2026-48831- CVSS 4.0
- 7.3 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/V:D/U:Clear - Weakness
- CWE-669
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-48831
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
- Record
DEBIAN-CVE-2026-48831- CVSS 4.0
- 7.3 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:Clear - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-48831
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
- Record
UBUNTU-CVE-2026-48831- CVSS 4.0
- 7.3 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/V:D/U:Clear - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wineDebian:12 |
All versions, plus listed versions 10.0~rc1~repack-110.0~rc2~repack-110.0~rc2~repack-210.0~rc2~repack-310.0~rc2~repack-4 Show 25 moreShow less10.0~repack-110.0~repack-1010.0~repack-1110.0~repack-1210.0~repack-210.0~repack-310.0~repack-410.0~repack-510.0~repack-610.0~repack-710.0~repack-810.0~repack-98.0.1~repack-18.0.1~repack-28.0.1~repack-38.0.2~repack-18.0.2~repack-28.0~repack-49.0~repack-19.0~repack-29.0~repack-39.0~repack-49.0~repack-59.0~repack-69.0~repack-7 |
None known |
wineDebian:13 |
All versions, plus listed versions 10.0~repack-1010.0~repack-1110.0~repack-1210.0~repack-610.0~repack-710.0~repack-810.0~repack-9 |
None known |
wineUbuntu:18.04:LTS |
All versions, plus listed versions 2.0.2-2ubuntu12.0.3-1ubuntu12.0.4-1ubuntu13.0-1ubuntu1 |
None known |
wineUbuntu:20.04:LTS |
All versions, plus listed versions 4.0.2-14.0.3-15.0~rc3-1ubuntu25.0~rc4-1ubuntu15.0~rc5-1ubuntu1 Show 4 moreShow less5.0~rc6-1ubuntu15.0-2ubuntu15.0-35.0-3ubuntu1 |
None known |
wineUbuntu:22.04:LTS |
All versions, plus listed versions 5.0.3-3ubuntu26.0.3~repack-1 |
None known |
wineUbuntu:24.04:LTS |
All versions, plus listed versions 8.0.1~repack-3ubuntu28.0.2~repack-29.0~repack-49.0~repack-4build29.0~repack-4build3 |
None known |
wineUbuntu:25.10 |
All versions, plus listed versions 9.0~repack-4build310.0~repack-3ubuntu310.0~repack-4ubuntu110.0~repack-5ubuntu110.0~repack-6ubuntu1 |
None known |
wineUbuntu:26.10 |
All versions, plus listed versions 10.0~repack-12ubuntu1 |
None known |
wineUbuntu:26.04:LTS |
All versions, plus listed versions 10.0~repack-6ubuntu110.0~repack-1110.0~repack-12build110.0~repack-12ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-48831 is a high vulnerability (CVSS 7.3) in Winehq Wine, published May 24, 2026. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile.