CVE-2026-42953
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution.
Risk Assessment
The risk for the organization includes the possibility of remote code execution, which could lead to system compromise, data theft, or service disruption.
Recommendation
It is recommended to immediately update the application to the latest version that fixes this vulnerability and implement memory protection mechanisms such as ASLR and DEP.
Other vulnerabilities in Application
See all- CVE-2026-55977Low
Successful exploitation of this vulnerability allows an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the screen-sharing code and potentially displaying harmful content on the affected screen.
- CVE-2026-64880High
The application contains an SQL injection vulnerability in report filtering parameters. Unsanitized user input is concatenated directly into SQL queries, enabling blind SQL injection and unauthorized database read access.
- CVE-2026-49033High
The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.
- CVE-2026-42958High
The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process.
Original NVD description (English source)
The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS