CVE-2026-3006

Description

Successful exploitation of the race condition vulnerability could allow an attacker to trigger a kernel heap overflow, potentially leading to local privilege escalation and granting system-level access to the affected software.

CVSS Vector

References

• https://github.com/winfsp/winfsp/releases/tag/v2.2B1
• https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-043