CVE-2015-5652
Python 2 and 1 other: Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users…
CVE-2015-5652 is fixed in Python 3.5 on 1 platform by Python 3.5 3.5.1 (version 3.5.1), released December 6, 2015. 1 other affected product has no fix yet. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.2
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0059
48th percentile
Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory. NOTE: the vendor says "It was determined that this is a longtime behavior of Python that cannot really be altered at this point."
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| Python 3.5 | 3.5.1 | Python 3.5 3.5.1 | Dec 6, 2015 |
| No fix yet | |||
| Python 2 (Windows apps) | No fix yet | no-fix | n/a |