CVE-2026-60073
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
An out-of-bounds read vulnerability in Productivity Suite allows a physical attacker to control the length of data sent to a USB device, potentially causing a system crash or disclosure of kernel memory.
Risk Assessment
The risk for the organization includes potential system crashes or leakage of sensitive kernel memory data, compromising system confidentiality and availability.
Recommendation
It is recommended to immediately update Productivity Suite to the latest patched version and restrict physical access to USB devices.
Other vulnerabilities in Productivity Suite
See all- CVE-2026-61378Medium
A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash.
- CVE-2026-57896Medium
An out-of-bounds read vulnerability in Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product.
- CVE-2026-61389High
An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.
- CVE-2026-60140Medium
An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This can lead to exposing sensitive information or causing the affected product to become unstable or unavailable.
- CVE-2026-60063High
An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.
Original NVD description (English source)
An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. This can lead to a system crash or disclosure of kernel memory.