OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-24075

HIGH · CVSS 7.8 EPSS 0.06%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability arises from improper synchronization and race conditions in the device control handler, leading to memory corruption when multiple threads issue concurrent IOCTL requests. This flaw can potentially allow an attacker to execute arbitrary code or cause a denial of service. Organizations utilizing affected products should prioritize patching this vulnerability to mitigate the risk of exploitation.

CVE
CVE-2026-24075
Severity
HIGH
CVSS
7.8
EPSS
0.06%

Original NVD Description

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Related CVEs

Other vulnerabilities affecting the same vendor(s)