VULNERABILITY INTELLIGENCE
CVE-2021-36226
CVSS score9.8 CRITICAL
EPSS probability5.15%
CISA KEVNot currently listed
Published2023-02-06
Last modified2026-06-17
Description
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.