CVE-2026-40446

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-40446
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

6.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.4 / Impact : 5.5

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/Samsung/escargot/pull/1554
Configurations

No configuration.

History

13 Apr 2026, 06:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 6.5 		v2 : unknown
v3 : 6.9

13 Apr 2026, 05:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-13 05:16

Updated : 2026-04-13 15:01

NVD link : CVE-2026-40446

Mitre link : CVE-2026-40446

CVE.ORG link : CVE-2026-40446

JSON object : View

Products Affected

No product.

CWE
CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')