{"id":"CVE-2026-56910","kind":"vulnerability","aliases":["CVE-2026-56910"],"related":[],"title":"Multiple products: shared memory bounds check flaw allows local privilege escalation","description":"In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"An incorrect bounds check in several places lets code trigger an out-of-bounds read and write in shared memory. An attacker with local access can use it to escalate privileges without extra execution rights or user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["local-privilege-escalation","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:14+00:00","first_seen_at":"2026-11-10T20:46:06+00:00","triaged_at":"2026-11-10T20:53:52+00:00","updated_at":"2026-11-10T20:53:52+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:53:52Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Multiple products: shared memory bounds check flaw allows local privilege escalation","impact":"high","summary":"An incorrect bounds check in several places lets code trigger an out-of-bounds read and write in shared memory. An attacker with local access can use it to escalate privileges without extra execution rights or user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":["local-privilege-escalation"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local code gains elevated privileges on the machine","analyst_note":"Identify the affected vendor and products from the NVD entry and vendor bulletin; the description names no product, so the affected component and fixed versions are unknown.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00063,"input_tokens":4525,"output_tokens":355,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-56910':14A,17A 'access':47B 'addit':97C 'allow':8A 'attack':44B 'bound':5A,24B,36B,74C,85C 'check':6A,25B,86C 'code':30B 'could':88C 'cve':12A,15A 'due':81C 'escal':11A,21B,52B,92C 'execut':56B,98C 'exploit':107C 'extra':55B 'flaw':7A 'incorrect':23B,84C 'interact':60B,102C 'lead':89C 'let':29B 'local':9A,19B,46B,91C 'local-privilege-escal':18B 'locat':63C 'memori':4A,42B,80C 'multipl':1A,62C 'need':100C,105C 'out-of-bound':33B 'place':28B 'possibl':67C 'privileg':10A,20B,53B,94C,99C 'product':2A 'read':37B,75C 'right':57B 'sever':27B 'share':3A,41B,79C 'trigger':31B,70C 'use':49B 'user':59B,101C 'way':68C 'without':54B 'write':39B,77C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["localprivilegeescalation","other","unknown"],"campaign_type":null,"search_a":"'-2026':13A,16A '-56910':14A,17A 'allow':8A 'bound':5A 'check':6A 'cve':12A,15A 'escal':11A 'flaw':7A 'local':9A 'memori':4A 'multipl':1A 'privileg':10A 'product':2A 'share':3A","search_b":"'access':47B 'attack':44B 'bound':24B,36B 'check':25B 'code':30B 'escal':21B,52B 'execut':56B 'extra':55B 'incorrect':23B 'interact':60B 'let':29B 'local':19B,46B 'local-privilege-escal':18B 'memori':42B 'out-of-bound':33B 'place':28B 'privileg':20B,53B 'read':37B 'right':57B 'sever':27B 'share':41B 'trigger':31B 'use':49B 'user':59B 'without':54B 'write':39B","search_c":"'addit':97C 'bound':74C,85C 'check':86C 'could':88C 'due':81C 'escal':92C 'execut':98C 'exploit':107C 'incorrect':84C 'interact':102C 'lead':89C 'local':91C 'locat':63C 'memori':80C 'multipl':62C 'need':100C,105C 'possibl':67C 'privileg':94C,99C 'read':75C 'share':79C 'trigger':70C 'user':101C 'way':68C 'write':77C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-56910","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56910","severity":null,"published_at":"2026-11-10T20:19:14+00:00","modified_at":"2026-11-10T20:19:14+00:00","first_seen_at":"2026-11-10T20:46:06+00:00","fetched_at":"2026-11-10T20:46:06+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}