CVE-2026-58813

MediumCVSS 6.7/10Last modified Nov 12, 2026

Description

In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 12, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-588147.5In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial ofCVE-2026-588157.8In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privCVE-2026-588176.2In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. CVE-2026-58824.3Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HCVE-2026-588207.8In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege witCVE-2026-588216.2In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could lCVE-2026-588229.8In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code executiCVE-2026-588237.8In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to locaCVE-2026-588248.4In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalaCVE-2026-588258.4In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation ofCVE-2026-588268.4In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wCVE-2026-588278.4In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privi
CVE-2026-58813: Medium severity, CVSS 6.7 | Vulnix