CVE-2026-55273

HighCVSS 7.8/10Last modified Sep 25, 2026

Description

In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Sep 8, 2026
Last modified: Sep 25, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-552769.1Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints wer CVE-2026-552778.0In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead CVE-2026-55286.3A security vulnerability has been detected in MoussaabBadla code-screenshot-mcp up to 0.1.0. This affects an unknown part of the component H CVE-2026-552808.8In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege CVE-2026-552857.8In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local esc CVE-2026-552867.8In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esc CVE-2026-55294.3A vulnerability was detected in Dromara lamp-cloud up to 5.8.1. This vulnerability affects the function pageUser of the file /defUser/pageUs CVE-2026-552903.3In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local informati CVE-2026-552947.8In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loca CVE-2026-55306.3A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Mod CVE-2026-553018.4In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation o CVE-2026-553026.7In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privil