{"apiVersion":"1.0","identifier":"CVE-2026-75357","description":"An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js components.","publishedAt":"2026-08-27T17:19:58","lastModifiedAt":"2026-08-27T17:19:58","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-75357","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00258,"riskScore":0,"affectedProduct":"Bilibili Desktop","affectedVersions":"==1.17.9","vulnerabilityType":"Other","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-75357","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-75357","en":"https://www.redsauce.net/en/cves/CVE-2026-75357","fr":"https://www.redsauce.net/fr/cves/CVE-2026-75357","pt":"https://www.redsauce.net/pt/cves/CVE-2026-75357","de":"https://www.redsauce.net/de/cves/CVE-2026-75357","sk":"https://www.redsauce.net/sk/cves/CVE-2026-75357","el":"https://www.redsauce.net/el/cves/CVE-2026-75357"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-75357"}}