Riskcovery

CVE-2026-7270

Local privilege escalation via execve()

State
Published
Severity
7.8 High
Published
Apr 30, 2026
Updated
May 10, 2026
Reserved
Apr 28, 2026

Read the record on cve.org

Description

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers.

The bug may be exploitable by an unprivileged user to obtain superuser privileges.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

  • CWE-783 Operator Precedence Logic Error

Affected Products

ProductVersions
FreeBSDFreeBSD
  • 15.0-RELEASE to before p7Affected
  • 14.4-RELEASE to before p3Affected
  • 14.3-RELEASE to before p12Affected
  • 13.5-RELEASE to before p13Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.