CVE-2019-12594: DOSBox 0.74-2 has Incorrect Access Control.

Security readout for executives and security teams

CVE-2019-12594 is an incorrect access control issue reported in DOSBox 0.74-2. The provided sources confirm distribution security updates from Debian, Fedora, and openSUSE, but do not include severity, CVSS, exploit status, or technical impact details. Treat this as a package hygiene issue unless DOSBox is used in sensitive workflows. Exposure is most likely on endpoints or systems where DOSBox 0.74-2 or affected distro packages were installed. The sources do not identify network-facing services, cloud resources, or specific application integrations. Inventory should focus on package managers, desktop images, lab systems, and legacy emulation environments. Set priority based on where DOSBox is installed. This does not look like an internet-scale emergency from the supplied evidence, but security updates existed and should be applied through normal vulnerability management, especially on shared or sensitive workstations. Mitigation focus: Update DOSBox using the relevant operating system security advisory package.; Prioritize Debian, Fedora, and openSUSE systems referenced by the advisory sources.; Remove DOSBox where it is not required for business use..

Prepared

Jun 6, 2026, 20:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.