LOW 2.0 NVD
CVE-2026-120740
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses r
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).
References
- https://access.redhat.com/security/cve/CVE-2026-120740
- https://bugzilla.redhat.com/show_bug.cgi?id=2565405
This low severity vulnerability with a CVSS score of 2.0 was published on 2026-11-02 via NVD.
vulnfeed aggregates 17711 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.