CVE WatchNov 12, 2026

CVE-2026-111436

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with progra

CVSS

4.4

Medium

EPSS

—

KEV

—

Exploit Today

0-100

Published: Nov 12, 2026 · Last modified: Nov 12, 2026 · CWE-401

EPSS · 30d

Not enough EPSS history yet.

Technical description

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1061378.6 HIG

—

——0In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and insertion are not atomic, and case variations in aggregate descriptors can produce distinct retained types even though member resolution is case-insensitive. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication, by submitting concurrent or repeated crafted requests. These requests may corrupt dictionary state or increase CPU and memory use, potentially degrading availability. The issue is fixed in version `2026.3.1015`.8h CVE-2026-961767.5 HIG

68.6%

——21Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.2d CVE-2026-702407.5 HIG

65.4%

——20Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.2d CVE-2026-1199725.9 MED

59.2%

——18Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.2d CVE-2026-1199556.0 MED

36.0%

——11Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.2d CVE-2026-1199095.9 MED

59.3%

——18Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.2d