{"id":"CVE-2026-3006","aliases":["EUVD-2026-25755","GHSA-799v-78v3-96jc"],"status":"published","title":"Race Condition Vulnerability","description":"Successful exploitation of the race condition vulnerability could allow\nan attacker to trigger a kernel heap overflow, potentially leading to local privilege\nescalation and granting system-level access to the affected software.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00142,"percentile":0.03633,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362","CWE-368"],"published":"2026-04-27T02:35:17Z","modified":"2026-10-20T11:59:39Z","products":[{"vendor":"red hat","product":"red hat advanced cluster management for kubernetes 2"},{"vendor":"winfsp","product":"winfsp"}],"references":[{"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-043","tags":["advisory"]},{"url":"https://github.com/winfsp/winfsp/releases/tag/v2.2B1","tags":["web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3006","tags":["vdb-entry","x_refsource_REDHAT","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463150","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3006.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3006"},{"url":"https://github.com/advisories/GHSA-799v-78v3-96jc"}],"sources":{"cve":[{"id":"CVE-2026-3006","title":"Race Condition Vulnerability","description":"Successful exploitation of the race condition vulnerability could allow\nan attacker to trigger a kernel heap overflow, potentially leading to local privilege\nescalation and granting system-level access to the affected software.","status":"published","published":"2026-04-27T02:35:17.773Z","modified":"2026-07-15T01:10:11.833Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-362","CWE-368"],"updated_at":"2026-11-02T13:49:09.229322Z"}],"euvd":[{"id":"EUVD-2026-25755","description":"Successful exploitation of the race condition vulnerability could allow\nan attacker to trigger a kernel heap overflow, potentially leading to local privilege\nescalation and granting system-level access to the affected software.","status":"published","published":"2026-04-27T02:35:17Z","modified":"2026-07-15T01:10:11Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:55.842782Z"}],"ghsa":[{"id":"GHSA-799v-78v3-96jc","title":"Successful exploitation of the race condition vulnerability could allow\nan attacker to trigger a...","description":"Successful exploitation of the race condition vulnerability could allow\nan attacker to trigger a kernel heap overflow, potentially leading to local privilege\nescalation and granting system-level access to the affected software.","status":"published","published":"2026-04-27T03:30:28Z","modified":"2026-06-30T03:36:25Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362","CWE-368"],"updated_at":"2026-11-02T15:09:04.668745Z"}],"nvd":[{"id":"CVE-2026-3006","description":"Successful exploitation of the race condition vulnerability could allow\nan attacker to trigger a kernel heap overflow, potentially leading to local privilege\nescalation and granting system-level access to the affected software.","status":"published","published":"2026-04-27T03:15:59.277Z","modified":"2026-07-15T02:20:55.027Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-362","CWE-368"],"updated_at":"2026-11-02T14:12:16.252509Z"}],"osv":[{"id":"CVE-2026-3006","description":"Successful exploitation of the race condition vulnerability could allow\nan attacker to trigger a kernel heap overflow, potentially leading to local privilege\nescalation and granting system-level access to the affected software.","status":"published","published":"2026-04-27T03:15:59.277Z","modified":"2026-10-20T11:59:39.20895145Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:00.530889Z"}]}}