CVE Watch9 de nov. de 2026

CVE-2026-114594

A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to rep

CVSS

—

Sem CVSS

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 9 de nov. de 2026 · Última mod.: 9 de nov. de 2026 · CWE-367 · CWE-379

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated installer then executes the attacker-controlled binary, resulting in local privilege escalation to a high-integrity (administrative) context. This issue affects Sandisk Dashboard through 5.2.2.3.

Referências oficiais

www.sandisk.comhttps://www.sandisk.com/support/product-security/sdc-26001-sandisk-dashboard-app-version-5-3-2-4

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-54506—

—

———A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity.9h CVE-2026-500793.3 BAI

—

——0Time-of-check Time-of-use (TOCTOU) Race Condition in the virtio network virtual device could allow an attacker in the guest to manipulate the virtual network device causing a crash of the QVM.11h CVE-2026-882167.5 ALT

—

——0Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.9h CVE-2026-1224745.9 MÉD

—

——0Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.12h CVE-2026-1207787.3 ALT

—

——0Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.12h CVE-2026-1199747.0 ALT

—

——0Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.12h