VULNERABILITY INTELLIGENCE
CVE-2026-61389
CVSS score7 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-07-16
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-787