CVE-2026-56949
In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race co
CVSS
6.4
Medium
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 11, 2026 · CWE-362
Not enough EPSS history yet.
In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-52537——
———Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of guest memory integrity.8hCVE-2026-1208176.5 MED—
———A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server terminating unexpectedly.8hCVE-2026-587786.4 MED—
——0In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.5hCVE-2026-552976.4 MED—
——0In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via concurrent shared memory modification due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.5hCVE-2026-961717.0 HIG—
——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.5hCVE-2026-961587.0 HIG—
——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.5h