{"id":"CVE-2026-48831","details":"Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).","modified":"2026-07-08T08:33:46.994625341Z","published":"2026-05-24T20:52:36.535Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48831.json","cna_assigner":"mitre","isDisputed":true,"cwe_ids":["CWE-669"]},"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2026/05/25/1"},{"type":"WEB","url":"https://bugs.winehq.org/show_bug.cgi?id=59767"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2026/05/19/1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48831.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48831"},{"type":"PACKAGE","url":"https://gitlab.winehq.org/wine/wine"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.winehq.org/wine/wine","events":[{"introduced":"d7d3169d8a074acffbade86429f8984ac316cd3e"},{"last_affected":"db11d0fe6a169c457e23d007e20404643d067aa8"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"0.9"},{"last_affected":"11.0"}]}}],"versions":["wine-11.0","wine-11.0-rc5","wine-11.0-rc4","wine-11.0-rc3","wine-11.0-rc2","wine-11.0-rc1","wine-10.20","wine-10.19","wine-10.18","wine-10.17","wine-10.16","wine-10.15","wine-10.14","wine-10.13","wine-10.12","wine-10.11","wine-10.10","wine-10.9","wine-10.8","wine-10.7","wine-10.6","wine-9.0","wine-10.5","wine-10.4","wine-10.3","wine-10.2","wine-10.1","wine-10.0","wine-10.0-rc6","wine-10.0-rc5","wine-10.0-rc4","wine-10.0-rc3","wine-10.0-rc2","wine-10.0-rc1","wine-9.22","wine-9.21","wine-9.20","wine-9.19","wine-9.18","wine-9.17","wine-9.16","wine-9.15","wine-9.14","wine-9.13","wine-9.12","wine-9.11","wine-9.10","wine-9.9","wine-9.8","wine-9.7","wine-9.6","wine-9.5","wine-9.4","wine-9.3","wine-9.2","wine-9.1","wine-9.0-rc5","wine-9.0-rc4","wine-9.0-rc3","wine-9.0-rc2","wine-9.0-rc1","wine-8.21","wine-8.20","wine-8.19","wine-8.18","wine-8.17","wine-8.16","wine-8.15","wine-8.14","wine-8.13","wine-8.12","wine-8.11","wine-8.10","wine-8.9","wine-8.8","wine-8.7","wine-8.0","wine-8.6","wine-8.5","wine-8.4","wine-8.3","wine-8.2","wine-8.1","wine-8.0-rc5","wine-8.0-rc4","wine-8.0-rc3","wine-8.0-rc2","wine-8.0-rc1","wine-7.22","wine-7.21","wine-7.0","wine-7.20","wine-7.19","wine-7.18","wine-7.17","wine-7.16","wine-7.15","wine-7.14","wine-7.13","wine-7.12","wine-7.11","wine-7.10","wine-7.9","wine-7.8","wine-7.7","wine-7.6","wine-7.5","wine-7.4","wine-7.3","wine-7.2","wine-7.1","wine-7.0-rc6","wine-7.0-rc5","wine-7.0-rc4","wine-7.0-rc3","wine-7.0-rc2","wine-7.0-rc1","wine-6.23","wine-6.22","wine-6.21","wine-6.20","wine-6.19","wine-6.18","wine-6.17","wine-6.16","wine-6.15","wine-6.14","wine-6.13","wine-6.12","wine-6.11","wine-6.10","wine-6.9","wine-6.8","wine-6.7","wine-6.6","wine-6.5","wine-6.0","wine-6.4","wine-6.3","wine-6.2","wine-6.1","wine-6.0-rc6","wine-6.0-rc5","wine-6.0-rc4","wine-6.0-rc3","wine-6.0-rc2","wine-6.0-rc1","wine-5.22","wine-5.21","wine-5.20","wine-5.19","wine-5.18","wine-5.17","wine-5.16","wine-5.15","wine-5.14","wine-5.13","wine-5.12","wine-5.11","wine-5.10","wine-5.9","wine-5.8","wine-5.0","wine-5.7","wine-5.6","wine-5.5","wine-5.4","wine-5.3","wine-5.2","wine-5.1","wine-5.0-rc6","wine-5.0-rc5","wine-5.0-rc4","wine-5.0-rc3","wine-5.0-rc2","wine-5.0-rc1","wine-4.21","wine-4.20","wine-4.19","wine-4.18","wine-4.17","wine-4.16","wine-4.15","wine-4.14","wine-4.13","wine-4.12.1","wine-4.12","wine-4.11","wine-4.10","wine-4.9","wine-4.8","wine-4.7","wine-4.6","wine-4.0","wine-4.5","wine-4.4","wine-4.3","wine-4.2","wine-4.1","wine-4.0-rc7","wine-4.0-rc6","wine-4.0-rc5","wine-4.0-rc4","wine-4.0-rc3","wine-4.0-rc2","wine-4.0-rc1","wine-3.21","wine-3.20","wine-3.19","wine-3.18","wine-3.17","wine-3.16","wine-3.15","wine-3.14","wine-3.13","wine-3.12","wine-3.11","wine-3.10","wine-3.9","wine-3.8","wine-3.7","wine-3.6","wine-3.5","wine-3.4","wine-3.3","wine-3.0","wine-3.2","wine-3.1","wine-3.0-rc6","wine-3.0-rc5","wine-3.0-rc4","wine-3.0-rc3","wine-3.0-rc2","wine-3.0-rc1","wine-2.22","wine-2.21","wine-2.20","wine-2.19","wine-2.18","wine-2.17","wine-2.16","wine-2.15","wine-2.14","wine-2.13","wine-2.12","wine-2.11","wine-2.10","wine-2.9","wine-2.8","wine-2.7","wine-2.6","wine-2.5","wine-2.4","wine-2.3","wine-2.0","wine-2.2","wine-2.1","wine-2.0-rc6","wine-2.0-rc5","wine-2.0-rc4","wine-2.0-rc3","wine-2.0-rc2","wine-2.0-rc1","wine-1.9.24","wine-1.9.23","wine-1.9.22","wine-1.9.21","wine-1.9.20","wine-1.9.19","wine-1.9.18","wine-1.9.17","wine-1.9.16","wine-1.9.15","wine-1.9.14","wine-1.9.13","wine-1.9.12","wine-1.9.11","wine-1.9.10","wine-1.9.9","wine-1.9.8","wine-1.9.7","wine-1.9.6","wine-1.9.5","wine-1.9.4","wine-1.9.3","wine-1.9.2","wine-1.9.1","wine-1.8","wine-1.9.0","wine-1.8-rc4","wine-1.8-rc3","wine-1.8-rc2","wine-1.8-rc1","wine-1.7.55","wine-1.7.54","wine-1.7.53","wine-1.7.52","wine-1.7.51","wine-1.7.50","wine-1.7.49","wine-1.7.48","wine-1.7.47","wine-1.7.46","wine-1.7.45","wine-1.7.44","wine-1.7.43","wine-1.7.42","wine-1.7.41","wine-1.7.40","wine-1.7.39","wine-1.7.38","wine-1.7.37","wine-1.7.36","wine-1.7.35","wine-1.7.34","wine-1.7.33","wine-1.7.32","wine-1.7.31","wine-1.7.30","wine-1.7.29","wine-1.7.28","wine-1.7.27","wine-1.7.26","wine-1.7.25","wine-1.7.24","wine-1.7.23","wine-1.7.22","wine-1.7.21","wine-1.7.20","wine-1.7.19","wine-1.7.18","wine-1.7.17","wine-1.7.16","wine-1.7.15","wine-1.7.14","wine-1.7.13","wine-1.7.12","wine-1.7.11","wine-1.7.10","wine-1.7.9","wine-1.7.8","wine-1.7.7","wine-1.6","wine-1.7.6","wine-1.7.5","wine-1.7.4","wine-1.7.3","wine-1.7.2","wine-1.7.1","wine-1.7.0","wine-1.6-rc5","wine-1.6-rc4","wine-1.6-rc3","wine-1.6-rc2","wine-1.6-rc1","wine-1.5.31","wine-1.5.30","wine-1.5.29","wine-1.5.28","wine-1.5.27","wine-1.5.26","wine-1.5.25","wine-1.5.24","wine-1.5.23","wine-1.5.22","wine-1.5.21","wine-1.5.20","wine-1.5.19","wine-1.5.18","wine-1.5.17","wine-1.5.16","wine-1.5.15","wine-1.5.14","wine-1.5.13","wine-1.5.12","wine-1.5.11","wine-1.5.10","wine-1.5.9","wine-1.5.8","wine-1.5.7","wine-1.4","wine-1.5.6","wine-1.5.5","wine-1.5.4","wine-1.5.3","wine-1.5.2","wine-1.5.1","wine-1.5.0","wine-1.4-rc6","wine-1.4-rc5","wine-1.4-rc4","wine-1.4-rc3","wine-1.4-rc2","wine-1.4-rc1","wine-1.3.37","wine-1.3.36","wine-1.3.35","wine-1.3.34","wine-1.3.33","wine-1.3.32","wine-1.3.31","wine-1.3.30","wine-1.3.29","wine-1.3.28","wine-1.3.27","wine-1.3.26","wine-1.3.25","wine-1.3.24","wine-1.3.23","wine-1.3.22","wine-1.3.21","wine-1.3.20","wine-1.3.19","wine-1.3.18","wine-1.3.17","wine-1.3.16","wine-1.3.15","wine-1.3.14","wine-1.3.13","wine-1.3.12","wine-1.3.11","wine-1.3.10","wine-1.3.9","wine-1.3.8","wine-1.3.7","wine-1.3.6","wine-1.3.5","wine-1.3.4","wine-1.3.3","wine-1.3.2","wine-1.2","wine-1.3.1","wine-1.3.0","wine-1.2-rc7","wine-1.2-rc6","wine-1.2-rc5","wine-1.2-rc4","wine-1.2-rc3","wine-1.2-rc2","wine-1.2-rc1","wine-1.1.44","wine-1.1.43","wine-1.1.42","wine-1.1.41","wine-1.1.40","wine-1.1.39","wine-1.1.38","wine-1.1.37","wine-1.1.36","wine-1.1.35","wine-1.1.34","wine-1.1.33","wine-1.1.32","wine-1.1.31","wine-1.1.30","wine-1.1.29","wine-1.1.28","wine-1.1.27","wine-1.1.26","wine-1.1.25","wine-1.1.24","wine-1.1.23","wine-1.1.22","wine-1.1.21","wine-1.1.20","wine-1.1.19","wine-1.1.18","wine-1.1.17","wine-1.1.16","wine-1.1.15","wine-1.1.14","wine-1.1.13","wine-1.1.12","wine-1.1.11","wine-1.1.10","wine-1.1.9","wine-1.1.8","wine-1.1.7","wine-1.1.6","wine-1.1.5","wine-1.1.4","wine-1.1.3","wine-1.1.2","wine-1.0","wine-1.1.1","wine-1.1.0","wine-1.0-rc5","wine-1.0-rc4","wine-1.0-rc3","wine-1.0-rc2","wine-1.0-rc1","wine-0.9.61","wine-0.9.60","wine-0.9.59","wine-0.9.58","wine-0.9.57","wine-0.9.56","wine-0.9.55","wine-0.9.54","wine-0.9.53","wine-0.9.52","wine-0.9.51","wine-0.9.50","wine-0.9.49","wine-0.9.48","wine-0.9.47","wine-0.9.46","wine-0.9.45","wine-0.9.44","wine-0.9.43","wine-0.9.42","wine-0.9.41","wine-0.9.40","wine-0.9.39","wine-0.9.38","wine-0.9.37","wine-0.9.36","wine-0.9.35","wine-0.9.34","wine-0.9.33","wine-0.9.32","wine-0.9.31","wine-0.9.30","wine-0.9.29","wine-0.9.28","wine-0.9.27","wine-0.9.26","wine-0.9.25","wine-0.9.24","wine-0.9.23","wine-0.9.22","wine-0.9.21","wine-0.9.20","wine-0.9.19","wine-0.9.18","wine-0.9.17","wine-0.9.16","wine-0.9.15","wine-0.9.14","wine-0.9.13","wine-0.9.12","wine-0.9.11","wine-0.9.10","wine-0.9.9","wine-0.9.8","wine-0.9.7","wine-0.9.6","wine-0.9.5","wine-0.9.4","wine-0.9.3","wine-0.9.2","wine-0.9.1","wine-0.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-48831.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/V:D/U:Clear"}]}