CVE-2026-21371

CVE-2026-21371 is a memory corruption vulnerability arising from insufficient size validation when retrieving output buffers, affecting systems that process improperly validated buffer operations. This flaw has a CVSS score of 7.8 (HIGH) with a local attack vector requiring low privileges and no user interaction, making it a moderate-to-high severity concern. The vulnerability enables attackers with local access to achieve high-impact outcomes including confidentiality loss, integrity compromise, and availability disruption. Currently, there is no evidence of active exploitation in the wild, as indicated by its absence from the Known Exploited Vulnerabilities catalog and inactive status on threat tracking lists. The EPSS score of 0.000060 suggests this vulnerability ranks lower than typical CVEs in terms of exploitation probability, though the FAUCET risk score of 49.0 indicates it warrants monitoring and patching within standard vulnerability management cycles.