CVE-2026-14478
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.
Risk Assessment
An attacker may gain unauthorized access to inter-process communication, potentially leading to privilege escalation or data compromise.
Recommendation
It is recommended to restrict execution of unknown files, apply least privilege principles, and monitor IPC activity.
Original NVD description (English source)
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.