Skip to content
Multiple Vulnerabilities Found in Atril Document Viewer

Multiple Vulnerabilities Found in Atril Document Viewer

First seen 29 Sep 2026, 21:04 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 29, 2026 at 21:05 UTC
  • •Atril vulnerabilities affect Ubuntu 16.04 LTS users.
  • •CVE-2026-46529 allows arbitrary code execution via crafted PDFs.
  • •Patches are available through standard system updates.

Atril, the official document viewer for the MATE desktop environment, has multiple vulnerabilities affecting Ubuntu 16.04 LTS. The most critical issue (CVE-2026-46529) allows arbitrary code execution via specially crafted PDF files due to improper sanitization of command-line arguments. Other vulnerabilities (CVE-2019-1010006 and CVE-2019-11459) could lead to denial of service and exposure of sensitive information, respectively. All vulnerabilities are specific to Ubuntu 16.04 LTS. Users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed in a security notice (USN-8839-1) published on September 28, 2026. The issues have been confirmed and patches are available through standard system updates.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2019-04-22
CVE-2019-11459 published
CVE-2019-11459 was published, detailing a vulnerability in Atril that could expose sensitive information.
Linuxsecurity
2019-07-15
CVE-2019-1010006 published
CVE-2019-1010006 was published, describing a denial of service vulnerability in Atril.
Linuxsecurity
2026-06-10
CVE-2026-46529 published
CVE-2026-46529 was published, detailing a critical vulnerability in Atril allowing arbitrary code execution.
Linuxsecurity
2026-09-28
Atril vulnerabilities disclosed
Ubuntu published USN-8839-1 detailing multiple vulnerabilities in Atril affecting Ubuntu 16.04 LTS.
Ubuntu

More articles in this cluster (2)

Following this threat?

Track Ubuntu and CVE-2019-1010006 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3