CVEvulnerability

CVE-2026-19380

1.8 LOW Published 2026-08-10 Modified 2026-10-23 Official page ↗
Status
Deferred
Published
2026-08-10
Last modified
2026-10-23
Assigner
[email protected]
CVSS 4.0 ([email protected])
1.8 LOW — CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
2.3 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
1.4 LOW — AV:L/AC:L/Au:M/C:N/I:N/A:P
Weaknesses
CWE-664, CWE-911

Description

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

Related

Weakness · CWE (2)

  • CWE-664 Improper Control of a Resource Through its Lifetime weakness
  • CWE-911 Improper Update of Reference Count weakness

References