CVE-2026-7270
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Apr 30, 2026
CISA due date
—
The record
An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- GHSA-39q2-94rc-95cp DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation CWE-783
- CVE-2026-0209 Under certain administrative conditions, FlashArray Purity may apply snapshot retention… CWE-783
- CVE-2026-25233 PEAR is a framework and distribution system for reusable PHP components. CWE-783