CVE-2026-119055: Use After Free
Published Nov 11, 2026
·Updated
CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could trick the end user to open a specially crafted malicious SSD file.
Event History
Nov 11, 2026
CVE Published
via MITRE·06:28 PM
Data Sourced
via MITRE·06:28 PM
DescriptionWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Users of the affected software are exposed when they can be persuaded to open a specially crafted malicious SSD file locally. The attack requires user interaction and is not described as remotely exploitable.
2
What does an attacker need to exploit it?
An attacker needs to create a malicious SSD file and trick an end user into opening it. No privileges are required before exploitation, but local access and user interaction are required.
3
What is the potential impact if exploitation succeeds?
Successful exploitation could cause arbitrary code execution. The provided severity vector indicates impacts to confidentiality, integrity, and availability are rated low.