CVE-2026-58822

CriticalCVSS 9.8/10Last modified Sep 24, 2026

Description

In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-704

Affected software

No affected versions have been published.

Timeline

Published: Sep 8, 2026
Last modified: Sep 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-588237.8In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to loca CVE-2026-58838.8Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a c CVE-2026-588345.5In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input valida CVE-2026-588358.8In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execut CVE-2026-588397.8In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of CVE-2026-58848.8Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised th CVE-2026-588417.8In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could CVE-2026-588467.8In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of CVE-2026-588487.0In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escal CVE-2026-58856.5Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain p CVE-2026-588547.8In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no CVE-2026-588563.3In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. Th