High severity8.8NVD Advisory· Published Feb 22, 2023· Updated May 20, 2026

CVE-2023-26314

Description

The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mono/Mono3 versions
cpe:2.3:a:mono-project:mono:5.18.0.240\+dfsg-3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mono-project:mono:5.18.0.240\+dfsg-3:*:*:*:*:*:*:*
- cpe:2.3:a:mono-project:mono:6.8.0.105\+dfsg-3:*:*:*:*:*:*:*
- (no CPE)range: <6.8.0.105+dfsg-3.3
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Debian/monodescription

Patches

Vulnerability mechanics

References

lists.debian.org/debian-lts-announce/2023/02/msg00037.htmlnvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/01/05/1nvdMailing ListThird Party Advisory
bugs.debian.org/972146nvdMailing ListMitigation
www.openwall.com/lists/oss-security/2026/05/19/2nvd
www.openwall.com/lists/oss-security/2026/05/19/41nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000