CVE-2026-0056

LOW

CVSS v3.1: 3.3 · EPSS: 0.0000 (0.2 percentile)

No user interactionBuffer OverflowVendor advisory ref

Source data as of:

At a glance

Severity
LOW
CVSS
3.3 v3.1 · NVD
EPSS
0.0000 (0.2 percentile) · FIRST.org
CISA KEV
No
Type
Buffer Overflow · NVD CWE
Attack conditions (CVSS vector)
No user interaction · Source: NVD Vector
Affected vendors
google
Published
2026-06-01 · Modified: 2026-06-02

CVSS / EPSS / KEV

CVSS v3.1 3.3 / 10 LOW Source: NVD
EPSS 0.0000 0.2 percentile Source: FIRST.org
CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Record details

CVE ID
CVE-2026-0056
CVSS (v3.1)
3.3 (LOW)
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability subscore
1.8
Impact subscore
1.4
EPSS
0.0000 (0.2 percentile) — 2026-06-03
CISA KEV
No
Weakness (CWE)
CWE-120
Affected vendors
google
Affected configurations (CPE)
4
Published
2026-06-01
Modified
2026-06-02
Status
Undergoing Analysis

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.