From ffbfab5ba7b16636006be661a7c77f5181250d11 Mon Sep 17 00:00:00 2001 From: Niko <182184327+nikosecurity@users.noreply.github.com> Date: Thu, 23 Jul 2026 21:15:31 -0400 Subject: [PATCH] Improve GHSA-8gh5-q362-whfc --- .../GHSA-8gh5-q362-whfc.json | 32 +++++++++++++++++-- 1 file changed, 29 insertions(+), 3 deletions(-) diff --git a/advisories/unreviewed/2026/04/GHSA-8gh5-q362-whfc/GHSA-8gh5-q362-whfc.json b/advisories/unreviewed/2026/04/GHSA-8gh5-q362-whfc/GHSA-8gh5-q362-whfc.json index 75d3263482b16..a0963104625a0 100644 --- a/advisories/unreviewed/2026/04/GHSA-8gh5-q362-whfc/GHSA-8gh5-q362-whfc.json +++ b/advisories/unreviewed/2026/04/GHSA-8gh5-q362-whfc/GHSA-8gh5-q362-whfc.json @@ -6,22 +6,48 @@ "aliases": [ "CVE-2026-26179" ], - "details": "Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "summary": "Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability ", + "details": "A double free in the Windows Secure Kernel allows an authorized attacker to execute code in the context of the secure kernel.", "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "GitHub Actions", + "name": "" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ] } ], - "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26179" }, + { + "type": "PACKAGE", + "url": "https://github.com/nikosecurity/CVE-2026-26179" + }, { "type": "WEB", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26179" + }, + { + "type": "WEB", + "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-276" } ], "database_specific": {