CVE-2026-6928

CriticalCVSS 9.8/10Last modified Sep 29, 2026

Description

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Sep 23, 2026
Last modified
Sep 29, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-692807.0Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.CVE-2026-692817.0Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.CVE-2026-692828.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-692837.8Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.CVE-2026-692847.8Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.CVE-2026-692858.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.CVE-2026-692865.5Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.CVE-2026-692877.0Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.CVE-2026-692885.5Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.CVE-2026-692897.8Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate priviCVE-2026-69297.5The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based blind SQL Injection via CVE-2026-692907.8Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-6928: Critical severity, CVSS 9.8 | Vulnix