CVE-2025-36940: Use After Free

Published Aug 24, 2026

Updated

Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP)

Affected Software

1 affected component

Fuchsia

Event History

Aug 24, 2026

CVE Published

via MITRE·04:33 PM

Data Sourced

via MITRE·04:33 PM

DescriptionWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs existing low-privileged userspace access. The vulnerability can then be used to escalate privileges from userspace to the kernel.

Can this be exploited remotely?

The CVSS vector identifies network attack access with low attack complexity and no user interaction. However, exploitation also requires low privileges.

What security impact could successful exploitation have?

Successful exploitation could give an attacker kernel-level privileges and affect confidentiality, integrity, and availability.

CVE-2025-36940: Use After Free

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Can this be exploited remotely?

What security impact could successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Can this be exploited remotely?

What security impact could successful exploitation have?