VULNERABILITY INTELLIGENCE
CVE-2026-60140
CVSS score6.1 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-07-16
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Description
An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This can lead to exposing sensitive information or causing the affected product to become unstable or unavailable.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-125