CVE-2025-13566
A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show_content_in_floating_window/run_
CVSS
3.3
Low
EPSS
0.1%
p4
KEV
—
Exploit Today
1
0-100
Published: Nov 23, 2025 · Last modified: Oct 8, 2026 · CWE-119 · CWE-415
0.1%EPSS · 30 days0.1%
2026-09-302026-10-28
A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show_content_in_floating_window/run_cmd_as_plugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is 2f07ccdf21e705377862e5f9dfa31e1694979ac7. It is suggested to install a patch to address this issue.
- github.comhttps://github.com/jarun/nnn/commit/2f07ccdf21e705377862e5f9dfa31e1694979ac7
- github.comhttps://github.com/jarun/nnn/issues/2091#issue-3635886658
- github.comhttps://github.com/jarun/nnn/issues/2091#issuecomment-3547591759
- vuldb.comhttps://vuldb.com/?ctiid.333330
- vuldb.comhttps://vuldb.com/?id.333330
- vuldb.comhttps://vuldb.com/?submit.698113
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1183598.8 HIG19.8%
——6Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9hCVE-2026-1183588.8 HIG19.8%
——6Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9hCVE-2026-1183528.8 HIG10.8%
——3Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9hCVE-2026-1183518.8 HIG10.8%
——3Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9hCVE-2026-1183498.8 HIG10.8%
——3Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9hCVE-2026-1183409.6 CRI12.8%
——4Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)19h