CVE-2026-19547

A flaw was found in Ghostscript. In Windows environments, the application searches for PostScript resource files in predictable directory paths that do not exist by default. An authenticated local user can exploit this issue by creating the required directory structure and planting a malicious PostScript file. When another user or system service runs Ghostscript, the file is automatically loaded and executed, leading to arbitrary code execution and privilege escalation with the permissions of the executing process.

This vulnerability is rated as having an Important impact because it enables a local unprivileged user to escalate privileges and execute arbitrary code in the context of a higher-privileged process through predictable search paths. Red Hat Enterprise Linux and related offerings are not affected by this issue, as the flawed resource search behavior and default root filesystem access permissions are specific to Windows environments. Because the vulnerability relies exclusively on Windows-specific path resolution conventions, the vulnerable code is not present in Red Hat distributions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.