CVE-2026-56985
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local privilege escalation without additional execution privileges. User interaction is not required for exploitation.
Risk Assessment
A local attacker could obtain signatures, potentially enabling forgery or data integrity compromise.
Recommendation
Apply security patches from the vendor that fix the type confusion issue in multiple files.
Other vulnerabilities in Multiple files
See all- CVE-2026-56992Medium
In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-56986High
In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local privilege escalation without additional execution privileges. User interaction is not required for exploitation.
Original NVD description (English source)
In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS