VULNERABILITY INTELLIGENCE

CVE-2021-36226

CVSS score9.8 CRITICAL
EPSS probability5.15%
CISA KEVNot currently listed
Published2023-02-06
Last modified2026-06-17

Description

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.