GCVE-110-NCSC-2026-141

Weaknesses (CWE)

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-122Heap-based Buffer OverflowCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-416Use After FreeCWE-190Integer Overflow or WraparoundCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-288Authentication Bypass Using an Alternate Path or ChannelCWE-125Out-of-bounds ReadCWE-401Missing Release of Memory after Effective LifetimeCWE-121Stack-based Buffer OverflowCWE-415Double FreeCWE-126Buffer Over-readCWE-476NULL Pointer DereferenceCWE-191Integer Underflow (Wrap or Wraparound)CWE-1329Reliance on Component That is Not UpdateableCWE-73External Control of File Name or PathCWE-822Untrusted Pointer DereferenceCWE-862Missing Authorization

Risk Scores

CVSS 3.1

7.0/10

High · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

Vendor	Product	Versions	Platforms
Microsoft	vers:unknown/*	—	—

Aliases

CVE-2026-21530 CVE-2026-32161 CVE-2026-32170 CVE-2026-32209 CVE-2026-33834 CVE-2026-33835 CVE-2026-33837 CVE-2026-33838 CVE-2026-33839 CVE-2026-33840 CVE-2026-33841 CVE-2026-34329 CVE-2026-34330 CVE-2026-34331 CVE-2026-34332 CVE-2026-34333 CVE-2026-34334 CVE-2026-34336 CVE-2026-34337 CVE-2026-34338 CVE-2026-34339 CVE-2026-34340 CVE-2026-34341 CVE-2026-34342 CVE-2026-34343 CVE-2026-34344 CVE-2026-34345 CVE-2026-34347 CVE-2026-34350 CVE-2026-34351 CVE-2026-35415 CVE-2026-35416 CVE-2026-35417 CVE-2026-35418 CVE-2026-35419 CVE-2026-35420 CVE-2026-35421 CVE-2026-35422 CVE-2026-35423 CVE-2026-35424 CVE-2026-35438 CVE-2026-40369 CVE-2026-40377 CVE-2026-40380 CVE-2026-40382 CVE-2026-40397 CVE-2026-40398 CVE-2026-40399 CVE-2026-40401 CVE-2026-40402 CVE-2026-40403 CVE-2026-40405 CVE-2026-40406 CVE-2026-40407 CVE-2026-40408 CVE-2026-40410 CVE-2026-40413 CVE-2026-40414 CVE-2026-40415 CVE-2026-41088 CVE-2026-41089 CVE-2026-41095 CVE-2026-41096 CVE-2026-41097 CVE-2026-42825 CVE-2026-42896

References

advisory