CVE-2019-14869

A flaw was found in all versions of ghostscript 9.x before 9.28, where the `.charkeys` procedure,...

7.3 HighFix available

A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

3.09%Down 1.5 points since Apr 14, 2021

What each source reports

CVE List Score used 7.3

Record: CVE-2019-14869
CVSS 3.0: 7.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-648
Updated: 2026-11-02

EUVDEUVD-2019-5984 7.3

Record: EUVD-2019-5984
CVSS 3.0: 7.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c87p-jj8p-c38g No score

A flaw was found in all versions of ghostscript 9.x before 9.28, where the `.charkeys` procedure,...

A flaw was found in all versions of ghostscript 9.x before 9.28, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.

Record: GHSA-c87p-jj8p-c38g
Updated: 2026-11-02

NVD 8.8

Record: CVE-2019-14869
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0: 7.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-648, CWE-732
Updated: 2026-11-02

OSVALPINE-CVE-2019-14869 8.8

Record: ALPINE-CVE-2019-14869
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVBELL-CVE-2019-14869 8.8

CVE-2019-14869 does not affect BellSoft software

Record: BELL-CVE-2019-14869
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 12 moreShow less

OSV 8.8

Record: CVE-2019-14869
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-14869 8.8

Record: DEBIAN-CVE-2019-14869
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2019:3888 7.3

Red Hat Security Advisory: ghostscript security update

Record: RHSA-2019:3888
CVSS 3.0: 7.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVRHSA-2019:3890 7.3

Red Hat Security Advisory: ghostscript security update

Record: RHSA-2019:3890
CVSS 3.0: 7.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVRHSA-2020:0222 7.3

Red Hat Security Advisory: ghostscript security update

Record: RHSA-2020:0222
CVSS 3.0: 7.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2019-14869 8.8

Record: UBUNTU-CVE-2019-14869
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0: 7.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVMGASA-2019-0336 No score

Updated ghostscript packages fix security vulnerability

The updated packages fix a security vulnerability:

-dSAFER escape in .charkeys. (CVE-2019-14869)

Record: MGASA-2019-0336
Updated: 2026-11-02

OSVopenSUSE-SU-2019:2534-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).

This update was imported from the SUSE:SLE-15:Update update project.

Record: openSUSE-SU-2019:2534-1
Updated: 2026-11-02

OSVopenSUSE-SU-2019:2535-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).

This update was imported from the SUSE:SLE-15:Update update project.

Record: openSUSE-SU-2019:2535-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2981-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).

Record: SUSE-SU-2019:2981-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2983-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issue:

CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).

Record: SUSE-SU-2019:2983-1
Updated: 2026-11-02

OSVUSN-4193-1 No score

ghostscript vulnerability

Paul Manfred and Lukas Schauer discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service.

Record: USN-4193-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`ghostscript` Alpine:v3.10	9.00 up to 9.27-r5	9.27-r5
`ghostscript` Alpine:v3.11	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.12	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.13	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.14	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.15	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.16	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.17	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.18	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.19	9.00 up to 9.50-r0	9.50-r0

Show 94 moreShow less

Affected packages
Package	Affected	Fixed
`ghostscript` Alpine:v3.20	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.21	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.22	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.23	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.24	9.00 up to 9.50-r0	9.50-r0
`ghostscript` Alpine:v3.9	9.00 up to 9.26-r5	9.26-r5
`ghostscript` Debian:12	before 9.50~dfsg-3	9.50~dfsg-3
`ghostscript` Debian:13	before 9.50~dfsg-3	9.50~dfsg-3
`ghostscript` Debian:14	before 9.50~dfsg-3	9.50~dfsg-3
`ghostscript` Debian:8	before 9.26a~dfsg-0+deb8u6, plus listed versions 9.06~dfsg-29.06~dfsg-2+deb8u19.06~dfsg-2+deb8u109.06~dfsg-2+deb8u119.06~dfsg-2+deb8u12 Show 45 moreShow less 9.06~dfsg-2+deb8u139.06~dfsg-2+deb8u29.06~dfsg-2+deb8u39.06~dfsg-2+deb8u49.06~dfsg-2+deb8u59.06~dfsg-2+deb8u69.06~dfsg-2+deb8u79.06~dfsg-2+deb8u89.06~dfsg-2+deb8u99.10~dfsg-19.15~dfsg-19.15~rc1~dfsg-19.16~dfsg-19.16~dfsg-29.16~dfsg-2+sparc649.16~dfsg-2.19.16~dfsg-2.1+sparc649.18~dfsg-19.18~dfsg-29.18~dfsg-39.18~dfsg-49.19~dfsg-19.19~dfsg-29.19~dfsg-39.19~dfsg-3.19.19~~rc1~dfsg-19.20~dfsg-19.20~dfsg-1~exp19.20~dfsg-29.20~dfsg-39.20~dfsg-3.19.20~dfsg-3.29.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-3	9.26a~dfsg-0+deb8u6
`ghostscript` Debian:9	before 9.26a~dfsg-0+deb9u6, plus listed versions 9.20~dfsg-3.29.20~dfsg-3.2+deb9u19.20~dfsg-3.2+deb9u29.20~dfsg-3.2+deb9u39.20~dfsg-3.2+deb9u4 Show 28 moreShow less 9.20~dfsg-3.2+deb9u59.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-0+deb9u19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-39.25~dfsg-49.25~dfsg-59.25~dfsg-69.25~dfsg-79.26a~dfsg-0+deb9u19.26a~dfsg-0+deb9u29.26a~dfsg-0+deb9u39.26a~dfsg-0+deb9u49.26a~dfsg-0+deb9u59.26~dfsg-0+deb9u19.26~dfsg-0+deb9u29.26~dfsg-19.26~dfsg-2	9.26a~dfsg-0+deb9u6
`ghostscript` Debian:10	before 9.27~dfsg-2+deb10u3, plus listed versions 9.27~dfsg-29.27~dfsg-2+deb10u19.27~dfsg-2+deb10u2	9.27~dfsg-2+deb10u3
`ghostscript` Mageia:7	before 9.27-1.4.mga7	9.27-1.4.mga7
`ghostscript` Red Hat:enterprise_linux:7::client	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-cups` Red Hat:enterprise_linux:7::client	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-debuginfo` Red Hat:enterprise_linux:7::client	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`libgs` Red Hat:enterprise_linux:7::client	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-doc` Red Hat:enterprise_linux:7::client	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-gtk` Red Hat:enterprise_linux:7::client	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`libgs-devel` Red Hat:enterprise_linux:7::client	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript` Red Hat:enterprise_linux:7::computenode	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-cups` Red Hat:enterprise_linux:7::computenode	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`libgs` Red Hat:enterprise_linux:7::computenode	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-doc` Red Hat:enterprise_linux:7::computenode	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-gtk` Red Hat:enterprise_linux:7::computenode	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`libgs-devel` Red Hat:enterprise_linux:7::computenode	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript` Red Hat:enterprise_linux:7::server	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-cups` Red Hat:enterprise_linux:7::server	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-debuginfo` Red Hat:enterprise_linux:7::server	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`libgs` Red Hat:enterprise_linux:7::server	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-doc` Red Hat:enterprise_linux:7::server	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-gtk` Red Hat:enterprise_linux:7::server	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`libgs-devel` Red Hat:enterprise_linux:7::server	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript` Red Hat:enterprise_linux:7::workstation	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-cups` Red Hat:enterprise_linux:7::workstation	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`libgs` Red Hat:enterprise_linux:7::workstation	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-doc` Red Hat:enterprise_linux:7::workstation	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript-gtk` Red Hat:enterprise_linux:7::workstation	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`libgs-devel` Red Hat:enterprise_linux:7::workstation	before 0:9.25-2.el7_7.3	0:9.25-2.el7_7.3
`ghostscript` Red Hat:enterprise_linux:8::appstream	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-gtk-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-x11-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`libgs` Red Hat:enterprise_linux:8::appstream	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`libgs-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-debugsource` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-doc` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-gtk-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-tools-dvipdf` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-tools-fonts` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-tools-printing` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-x11` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript-x11-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`libgs-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`libgs-devel` Red Hat:enterprise_linux:8::crb	before 0:9.25-5.el8_1.1	0:9.25-5.el8_1.1
`ghostscript` Red Hat:rhel_e4s:8.0::appstream	before 0:9.25-2.el8_0.4	0:9.25-2.el8_0.4
`ghostscript-debuginfo` Red Hat:rhel_e4s:8.0::appstream	before 0:9.25-2.el8_0.4	0:9.25-2.el8_0.4
`ghostscript-debugsource` Red Hat:rhel_e4s:8.0::appstream	before 0:9.25-2.el8_0.4	0:9.25-2.el8_0.4
`ghostscript-gtk-debuginfo` Red Hat:rhel_e4s:8.0::appstream	before 0:9.25-2.el8_0.4	0:9.25-2.el8_0.4
`ghostscript-x11-debuginfo` Red Hat:rhel_e4s:8.0::appstream	before 0:9.25-2.el8_0.4	0:9.25-2.el8_0.4
`libgs` Red Hat:rhel_e4s:8.0::appstream	before 0:9.25-2.el8_0.4	0:9.25-2.el8_0.4
`libgs-debuginfo` Red Hat:rhel_e4s:8.0::appstream	before 0:9.25-2.el8_0.4	0:9.25-2.el8_0.4
`ghostscript` SUSE:Linux Enterprise Module for Basesystem 15	before 9.27-3.24.1	9.27-3.24.1
`ghostscript` SUSE:Linux Enterprise Module for Basesystem 15 SP1	before 9.27-3.24.1	9.27-3.24.1
`ghostscript` SUSE:HPE Helion OpenStack 8	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:OpenStack Cloud 7	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:OpenStack Cloud 8	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:OpenStack Cloud Crowbar 8	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Desktop 12 SP4	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Software Development Kit 12 SP4	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server 12 SP1-LTSS	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server 12 SP2-LTSS	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server 12 SP2-BCL	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server 12 SP3-LTSS	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server 12 SP3-BCL	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server 12 SP4	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server for SAP Applications 12 SP4	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server 12 SP5	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` SUSE:Enterprise Storage 5	before 9.27-23.31.1	9.27-23.31.1
`ghostscript` Ubuntu:16.04:LTS	before 9.26~dfsg+0-0ubuntu0.16.04.12, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 19 moreShow less 9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.11	9.26~dfsg+0-0ubuntu0.16.04.12
`ghostscript` Ubuntu:18.04:LTS	before 9.26~dfsg+0-0ubuntu0.18.04.12, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 11 moreShow less 9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.11	9.26~dfsg+0-0ubuntu0.18.04.12
`ghostscript` openSUSE:Leap 15.0	before 9.27-lp150.2.26.1	9.27-lp150.2.26.1
`ghostscript-mini` openSUSE:Leap 15.0	before 9.27-lp150.2.26.1	9.27-lp150.2.26.1
`ghostscript` openSUSE:Leap 15.1	before 9.27-lp151.3.9.1	9.27-lp151.3.9.1
`ghostscript-mini` openSUSE:Leap 15.1	before 9.27-lp151.3.9.1	9.27-lp151.3.9.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-14869 is a high vulnerability (CVSS 7.3) in Artifex Ghostscript, published November 14, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.09%, the 87th percentile. Fixed in ghostscript 9.27-r5.

References

Show 34 moreShow less

This page doesn't list everything

Left out here: 11 versions. The JSON record has them.