本ページは greenwoodsoftware less に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2024-32487 | less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases. | [email protected] | 8.6 | 0.63% | 2024-04-13 | 2026-06-17 |
| CVE-2022-48624 | close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. | [email protected] | 7.8 | 1.06% | 2024-02-18 | 2026-06-17 |