CVE-2026-28668: Use After Free
Published Sep 8, 2026
·Updated
In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 8, 2026
CVE Published
via MITRE·06:05 PM
Data Sourced
via MITRE·06:05 PM
DescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is described as enabling local escalation of privilege. No additional execution privileges are needed, so exploitation does not require the attacker to first obtain elevated privileges.
2
Does exploiting this vulnerability require user interaction?
No. The available information states that user interaction is not needed for exploitation.
3
What is the underlying vulnerability type?
It is a use-after-free condition in LimitRealloc of malloc_limit.cpp, caused by a logic error in the code.