


Perceptive Security
SOC/SIEM Consultancy

Successful exploitation of the race condition vulnerability could allow
an attacker to trigger a kernel heap overflow, potentially leading to local privilege
es…
Published:
26 april 2026 om 22:00:00
Alert date:
27 april 2026 om 19:18:12
Source:
nvd.nist.gov
Operating Systems
CVE-2026-3006 is a race condition vulnerability that can be exploited to trigger a kernel heap overflow. Successful exploitation allows attackers to achieve local privilege escalation and gain system-level access to affected software. The vulnerability appears to affect WinFsp based on the GitHub release link provided. This represents a high-severity security issue due to its potential for privilege escalation at the kernel level.
Technical details
Mitigation steps:
Affected products:
WinFsp
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-3006
https://github.com/winfsp/winfsp/releases/tag/v2.2B1
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-043
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
