CVE-2026-34054 in Microsoft vcpkg
Sumário (Inglês)
vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set openssldir to a path on the build machine, making that path be attackable later on customer machines. This issue has been patched in version 3.6.1#3.
Responsável
GitHub_M
Reservar
25/03/2026
Divulgação
31/03/2026
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354301 | Microsoft vcpkg OpenSSL Elevação de Privilégios | 427 | Não definido | Correção oficial | CVE-2026-34054 |