CyberSecBulletin

The NetBSD Foundation vulnerabilities

We track 2 vulnerabilities in The NetBSD Foundation products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.

2vulnerabilities
0critical
2high
0exploited
7.0average CVSS score

Latest The NetBSD Foundation vulnerabilities

  • 7.0 High severity

    NetBSD: Double Free

    CVE-2026-57842The NetBSD Foundation

    NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the cleanup label on the success path. Any local user able to execute a 32-bit binary on

  • 7.0 High severity

    NetBSD: Missing Authorization

    CVE-2026-53996The NetBSD Foundation

    NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGRP_SETCONFIG ioctl without elevated permissions by exploiting the absence of an access chec