CVE-2026-7270

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges.

Scoring

Severity

HIGH

CVSS base score

7.8

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS probability

0.18%

CWE

CWE-783

Published

2026-04-30

Last modified

2026-05-10

Affected products

• FreeBSD FreeBSD
• FreeBSD FreeBSD
• FreeBSD FreeBSD
• FreeBSD FreeBSD

Weakness type

• CWE-783

Related vulnerabilities

• CVE-2026-0209 — Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies...
• CVE-2026-25233 — PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
• CVE-2025-27512 — Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods
• CVE-2024-20480 — A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access...
• CVE-2024-20314 — A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco...

Markdown version · Browse all CVEs