CVE-2026-55318

HighCVSS 8.8

Published: 15/09/2026(UTC)Updated: 21/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed.

Risk Assessment

A remote attacker could execute arbitrary code in the context of the vulnerable process, potentially leading to system compromise. No user interaction is required.

Recommendation

Update the vulnerable component to a version that fixes the race condition. Consider deploying additional memory protection mechanisms (e.g., ASLR, sandboxing).

Other vulnerabilities in Multiple components

CVE-2026-0171High
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed.

Original NVD description (English source)

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS