Threats Tagged 'ghsa-f447-c7m5-8f96'

1 threat

Threats Tagged 'ghsa-f447-c7m5-8f96'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS <0.1%	CVE-2026-102710eclipse-threadx/threadx · Improper Privilege Management Critical9.3EPSS <0.1%2026-09-29CVE Database V5CVE-2026-102710 CVE-2026-102710 is a critical improper privilege management vulnerability in Eclipse Foundation's eclipse-threadx/threadx. A user-mode, memory-protected module can register an arbitrary function pointer as a global trace callback, which the kernel calls directly without validation. This can lead to kernel faults (DoS) or execution of code with kernel privileges. EPSS <0.1%Vulnerability Eclipse Foundation #cwe-269 #cwe-822 #ghsa-f447-c7m5-8f96	CVE Database V5	2026-09-29

Showing 1–1 of 1 result