CVE-2026-60140 in Productivity Suite

Résumé

par MITRE • 16/07/2026

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This can lead to exposing sensitive information or causing the affected product to become unstable or unavailable.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: Icscert
• Réserver: 09/07/2026
• Divulgation: 16/07/2026
• Modérer: accepté
• Entrée: VDB-379641
• CPE: prêt
• CWE: CWE-125 (confirmé)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: très faible
• Secteur: Government, Transportation, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-60140
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-60140
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-60140/