SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-62428

HIGH · CVSS 7.8 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-07-28 · Last synced 2026-08-27

CyberRota Analysis

AI-Generated

This vulnerability affects systems performing grant-copy operations, where the referenced guest frame may not be accurately validated if another operation is concurrently using the same grant. As a result, permission checks could be executed on an incorrect page, potentially allowing unauthorized access or manipulation of memory. Organizations utilizing affected systems should prioritize remediation to mitigate the risk of exploitation and safeguard sensitive data.

CVE
CVE-2026-62428
Severity
HIGH
CVSS
7.8
EPSS
0.11%

Original NVD Description

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant (the grant is "pinned"), what is being supplied back to actually carry out permission checks and copy operation may not be consistent: The permission check may be carried out on a page different from the one involved in the copy.