LOWCVSS v3.1 2.0Vulnerability

CVE-2026-120740

A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).

Properties

Severity
LOW
Nvd fetched at
2026-11-04T01:29:06.847378+00:00
Epss score
0.00237
Cvss severity
LOW
Cvss score
2
Retrieved at
2026-11-04T01:32:28+00:00
Last source
FIRST EPSS
Score
2
Cvss version
3.1
Cve id
CVE-2026-120740
Cvss vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
First seen by Signal
2026-11-03T00:56:41+00:00
Name
CVE-2026-120740
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Published at
2026-11-02T22:17:21.313
Last modified
2026-11-02T22:17:21.443
Epss percentile
0.14806

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Out-of-bounds Read

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-120740 (CVSS v3.1 2) — Ninja Signal Threat Intelligence | Ninja Signal