← Back to search

CVE-2026-58984

8.4 HIGH

Published 2026-11-02 · Updated 2026-11-03

AI risk analysis

Summary
A use-after-free vulnerability in multiple locations allows an unprivileged local attacker to corrupt memory and achieve privilege escalation without user interaction.
Exploitability
Exploitation requires local access and no additional privileges; the lack of user interaction and low attack complexity make this highly exploitable by a local attacker.
Blast radius
Successful exploitation grants full local system compromise (CIA impact high), enabling complete control of the affected host.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the patched version as specified in the vendor advisory; since no fixed version is named in the description, apply the latest security update from the vendor or disable the affected component until a patch is available.
use-after-freeprivilege-escalationlocalmemory-corruption

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.