CVE Watch12 nov 2026

CVE-2026-111436

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with progra

CVSS

4.4

Medio

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 12 nov 2026 · Última mod.: 12 nov 2026 · CWE-401

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1061378.6 ALT

—

——0In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and insertion are not atomic, and case variations in aggregate descriptors can produce distinct retained types even though member resolution is case-insensitive. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication, by submitting concurrent or repeated crafted requests. These requests may corrupt dictionary state or increase CPU and memory use, potentially degrading availability. The issue is fixed in version `2026.3.1015`.9h CVE-2026-961767.5 ALT

68.6%

——21Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.2d CVE-2026-702407.5 ALT

65.4%

——20Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.2d CVE-2026-1199725.9 MED

59.2%

——18Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.2d CVE-2026-1199556.0 MED

36.0%

——11Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.2d CVE-2026-1199095.9 MED

59.3%

——18Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.2d