TypesettingTools vulnerabilities

Products

• Aegisub 1

Latest TypesettingTools CVEs

Newest publication first

1. CVE-2026-92705 Aegisub executes arbitrary code through automatically loaded Automation scripts

   Published 2026-10-09

   High·CVSS 7.8

   Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distri...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.