CVE-2026-120740 — Vulnerability intelligence
—
Published:
- CVSS
- 2
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash, resulting in a Denial of Service (DoS).