CVE-2026-42953 is an out-of-bounds write vulnerability in Labcenter Proteus 9.1_SP4_Build-42914. The vulnerability enables an attacker to cause the application to write data past the end of an allocated memory buffer, potentially leading to arbitrary code execution. The CVSS 4.0 vector indicates the attack requires local access with low complexity and no privileges, but user interaction is required. The vulnerability impacts confidentiality, integrity, and availability with high severity. No vendor remediation or patch is currently documented.

Successful exploitation of this vulnerability can result in arbitrary code execution within the context of the vulnerable application, compromising system integrity and potentially allowing an attacker to execute malicious code. The vulnerability affects confidentiality, integrity, and availability at a high level. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit local access to the affected system and avoid untrusted user interactions with the application. Monitor vendor communications for updates on patches or mitigations.