Critical severity9.8NVD Advisory· Published May 11, 2021· Updated Jun 17, 2026

CVE-2021-32563

Description

An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xfce/Thunar2 versions
cpe:2.3:a:xfce:thunar:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xfce:thunar:*:*:*:*:*:*:*:*range: <4.16.7
- (no CPE)range: <4.16.7, <4.17.2
Thunar/Thunardescription

Patches

Vulnerability mechanics

References

gitlab.xfce.org/xfce/thunar/-/commit/1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92dnvdPatch
gitlab.xfce.org/xfce/thunar/-/commit/3b54d9d7dbd7fd16235e2141c43a7f18718f5664nvdPatch
gitlab.xfce.org/xfce/thunar/-/commit/9165a61f95e43cc0b5abf9b98eee2818a0191e0bnvdPatch
www.openwall.com/lists/oss-security/2021/05/11/3nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/01/05/1nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/01/05/2nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2021/05/09/2nvdMailing ListThird Party Advisory
gitlab.xfce.org/xfce/thunar/-/tagsnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000