CVE-2026-86422

low Red Hat
CVSS v3 Base Score
3.3
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Attack Characteristics
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Published: September 7, 2026 (3 days ago)
Last Modified: September 7, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in ImageMagick. This vulnerability, known as a time-of-check-time-of-use (TOCTOU) flaw, affects path policy enforcement on Windows. A local attacker can exploit this by manipulating symbolic links (symlinks) during the brief interval between when the system checks a file's permissions and when it actually accesses the file. This allows the attacker to bypass security restrictions and potentially read or write files that should be protected by policy, leading to unauthorized information disclosure or data modification.

CWE

CWE-367

Affected Products

Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7

References

🔗 bugzilla.redhat.com 🔗 www.cve.org 🔗 nvd.nist.gov 🔗 github.com 🔗 www.vulncheck.com