7.8highHigh

CVE-2023-36664

Artifex Ghostscript

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

What the metrics mean

It is requires local access to the machine.
For an attacker who can reach it, no special conditions are needed to exploit it.
To exploit it, no account is needed.
Beyond that, someone has to be persuaded to take an action first.

As listed in the NVD configuration data. Not a statement about your estate.