CVE-2026-3383

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/boxed_number.hpp. Executing a manipulation can lead to divide by zero. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369CWE-404

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-338338.2Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unautCVE-2026-338347.8Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.CVE-2026-338357.8Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-338377.8Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.CVE-2026-338387.8Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.CVE-2026-338397.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized atCVE-2026-33845.5A security vulnerability has been detected in ChaiScript up to 6.1.0. This impacts the function chaiscript::eval::AST_Node_Impl::eval/chaiscCVE-2026-338407.8Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.CVE-2026-338417.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-338425.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information loCVE-2026-338439.8Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate CVE-2026-338449.0Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.