CVE-2026-69303

MEDIUM CVSS 3.1: 5.5 EPSS 0.41%
Updated Sep 08, 2026
Out-of-bounds
Parameter Value
CVSS 5.5 (MEDIUM)
Type CWE-125 (Out-of-bounds Read), CWE-191 (Integer Underflow)
Vendor Out-of-bounds
Public PoC No

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption

CVSS Vector v3.1