CVE Catalog
CVE-2026-66151
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.11%
1th percentile - higher than 1% of all known CVEs
Summary
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.
Risk Assessment
Risk of system crash (BSOD) due to a local attack, potentially leading to service disruption.
Recommendation
Update SonicWall Global VPN Client to the latest available version that includes the fix.
Original NVD description (English source)
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.