{"id":"CVE-2026-48183","kind":"vulnerability","aliases":["CVE-2026-48183"],"related":[],"title":"Buffer operations let untrusted apps create memory mappings with wrong permissions","description":"Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions","summary":"Improper permission handling during buffer operations lets untrusted applications create memory mappings with inappropriate permissions. The sources do not say which product or platform is affected, or what an attacker gets beyond that.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T03:17:28+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","triaged_at":"2026-11-05T03:33:43+00:00","updated_at":"2026-11-05T03:33:43+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-05T03:33:43Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Buffer operations let untrusted apps create memory mappings with wrong permissions","impact":"medium","summary":"Improper permission handling during buffer operations lets untrusted applications create memory mappings with inappropriate permissions. The sources do not say which product or platform is affected, or what an attacker gets beyond that.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown; memory mapping permissions could be abused by untrusted applications","analyst_note":"Identify the affected product and platform from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-48183, then find the vendor advisory for versions and fixes.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000604,"input_tokens":4147,"output_tokens":378,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-48183':14A,17A 'affect':44B 'allow':57C 'app':5A 'applic':27B,59C 'attack':48B 'beyond':50B 'buffer':1A,23B,55C 'creat':6A,28B,61C 'cve':12A,15A 'get':49B 'handl':21B,53C 'improp':19B,51C 'inappropri':32B,65C 'infrastructur':18B 'let':3A,25B 'map':8A,30B,63C 'memori':7A,29B,62C 'oper':2A,24B,56C 'permiss':11A,20B,33B,52C,66C 'platform':42B 'product':40B 'say':38B 'sourc':35B 'untrust':4A,26B,58C 'wrong':10A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T03:17:28+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-48183","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48183","severity":null,"published_at":"2026-11-05T03:17:28+00:00","modified_at":"2026-11-05T03:17:28+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","fetched_at":"2026-11-05T03:31:44+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}