Vulnerability Details CVE-2026-7270
An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers.
The bug may be exploitable by an unprivileged user to obtain superuser privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.1%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2026-7270
-
cpe:2.3:o:freebsd:freebsd:13.5
-
cpe:2.3:o:freebsd:freebsd:14.3
-
cpe:2.3:o:freebsd:freebsd:14.4
-
cpe:2.3:o:freebsd:freebsd:15.0