Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb:c_driver:1.9.2:*:*:*:*:mongodb:*:*

part: a version: 1.9.2 update: *

VendorMongodb (1aa156a6-63a9-5032-baaf-10197d408a1e)
ProductC Driver (23f7cc4a-8240-53c8-8593-cedcd3090749)
Edition*
Language*
Software edition*
Target softwaremongodb
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457784
pkg:deb/ubuntu/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457786
pkg:github/mongodb/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457787
pkg:rpm/fedora/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457788
pkg:rpm/opensuse/mongo-c-driver purl2cpe 2026-06-01 10:11:17.457790

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7553 vulnerable 2026-06-03 14:58:06.218878 Accessing Untrusted Directory May Allow Local Privilege Escalation
HIGH (7.3)
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issue
Published: 2024-08-07T09:57:49.818Z
Updated: 2024-08-07T15:27:46.258Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.