CVE-2026-19380: Mullvad wireguard.sys IOCTL AdapterState reference count
A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19380?
The severity of CVE-2026-19380 is classified as low with a score of 2.3.
How do I fix CVE-2026-19380?
To fix CVE-2026-19380, update Mullvad wireguard.sys to the latest version.
What component is affected by CVE-2026-19380?
CVE-2026-19380 affects the AdapterState function in the IOCTL Handler of Mullvad wireguard.sys.
Is local access required to exploit CVE-2026-19380?
Yes, local access is required to exploit CVE-2026-19380.
What type of attack does CVE-2026-19380 potentially enable?
CVE-2026-19380 can lead to improper update of the reference count, which may result in denial of service.