← Back to search

CVE-2026-55283

8.4 HIGH

Published 2026-11-02 · Updated 2026-11-03

AI risk analysis

Summary
A use-after-free vulnerability in multiple locations allows an unauthenticated remote attacker to trigger memory corruption, potentially leading to privilege escalation without user interaction.
Exploitability
Exploitation requires no additional privileges or user interaction, but success depends on precise memory conditions, making reliable exploitation challenging despite the high CVSS score.
Blast radius
Successful exploitation could grant an attacker full system control on the target host, enabling data theft, service disruption, or lateral movement within the environment.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
No fixed version or patch level is specified in the description; disable the affected feature or component until vendor guidance is available.
use-after-freeprivilege-escalationmemory-corruptionremote-exploit

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.