CVE Watch12 de nov. de 2026

CVE-2026-111436

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with progra

CVSS

4.4

Média

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 12 de nov. de 2026 · Última mod.: 12 de nov. de 2026 · CWE-401

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered frequently, exhausting the host machine's memory and ultimately leading to an OOM crash of the daemon, resulting in a denial of service (DoS).

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1061378.6 ALT

—

——0In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and insertion are not atomic, and case variations in aggregate descriptors can produce distinct retained types even though member resolution is case-insensitive. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication, by submitting concurrent or repeated crafted requests. These requests may corrupt dictionary state or increase CPU and memory use, potentially degrading availability. The issue is fixed in version `2026.3.1015`.9h CVE-2026-961767.5 ALT

68.6%

——21Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.2d CVE-2026-702407.5 ALT

65.4%

——20Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.2d CVE-2026-1199725.9 MÉD

59.2%

——18Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.2d CVE-2026-1199556.0 MÉD

36.0%

——11Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.2d CVE-2026-1199095.9 MÉD

59.3%

——18Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.2d