Skip to content

Product

azure linux bison vulnerabilities

2 published CVES affecting azure linux bison, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest azure linux bison CVEs

Newest publication first

  1. CVE-2026-56390 Arbitrary Output Location Change in GNU Bison

    Published
    MediumCVSS 4.6 EPSS 0.13%

    GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allo...

  2. CVE-2026-56389 Arbitrary Command Execution in GNU Bison

    Published
    MediumCVSS 6.8 EPSS 0.16%

    GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.