low · CVSS v3 2

CVE-2026-120740

A flaw in the hivex library allows an attacker to supply a crafted Windows registry hive file that triggers an out-of-bounds memory read dur

Overview

A flaw in the hivex library allows an attacker to supply a crafted Windows registry hive file that triggers an out-of-bounds memory read during parsing, causing the application to crash. The vulnerability results in a denial‑of‑service condition when processing malformed registry values. It is classified as low severity.

Description

A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).

Impact

The vulnerability leads to a denial of service by crashing applications that parse malicious registry files. Defenders are impacted if they run tools or services that rely on hivex for registry manipulation. The attack does not expose data or modify system state, but it can disrupt availability.

Remediation

Update to the latest hivex release that includes the patch for the malformed data block list handling. If an update is not immediately possible, validate or sanitize registry hive files before passing them to hivex, or restrict file access to trusted sources. Monitor application logs for unexpected crashes related to registry parsing.

Risk context

Severity is low with a CVSS v3 score of 2.0 and no EPSS data, indicating a low urgency but still worth addressing to prevent service disruptions.

Affected products

  • hivex
  • Windows registry parsers
  • Linux registry tools

Scores

Severity
low
CVSS v2
1.7
CVSS v3
2
CVSS v4
—
EPSS
—

DoS Out-of-bounds Memory read Registry hivex Low severity

← All CVEs

Related CVEs

low

CVE-2026-91896

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering, Denial of Service and Spoofing of Application Notifications.

View analysis

low

CVE-2026-91901

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery.

View analysis

low

CVE-2026-120215

CVE-2026-120215 causes a crash in @fastify/cors when the plugin is configured with a non-default onSend hook during a CORS preflight OPTIONS request. The crash terminates the Node.js process, leading to a denial of service. It affects applications using Fastify with the vulnerable plugin version.

View analysis

low

CVE-2026-120310

Parse Server versions prior to 8.6.109 and 9.0.0 before 9.10.6-alpha.1 contain an access control flaw in object update responses. The server returns stored field values without verifying read permissions, allowing clients with update-only access to view data they should not be able to read.

View analysis