CVE-2026-56992
MediumCVSS 6.7Summary
In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
An attacker with System privileges could exploit the confused deputy to escalate privileges, potentially leading to full system compromise. The risk is severe as high privileges are already required.
Recommendation
It is recommended to urgently apply security patches from the vendor. Also conduct a privilege audit in the system.
Other vulnerabilities in Multiple files
See all- CVE-2026-56986Unknown
In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local privilege escalation without additional execution privileges. User interaction is not required for exploitation.
- CVE-2026-56985Unknown
In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local privilege escalation without additional execution privileges. User interaction is not required for exploitation.
Original NVD description (English source)
In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.