CVE-2026-58966

HighCVSS 8.4/10Last modified Nov 10, 2026

Description

In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2026
Last modified
Nov 10, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-589689.8In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of priCVE-2026-589694.0In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead CVE-2026-58974.3Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in speciCVE-2026-589708.4In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local eCVE-2026-589714.0In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local informationCVE-2026-589748.4In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of priviCVE-2026-589758.4In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privileCVE-2026-589764.0In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to CVE-2026-589776.7In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local esCVE-2026-589786.8In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of priCVE-2026-589798.4In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to locCVE-2026-58984.3Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a craft
CVE-2026-58966: High severity, CVSS 8.4 | Vulnix