Skip to content
OpenAdvisories
Medium WID-SEC-2026-3624 4 CVEs

Wind River VxWorks 7: Mehrere Schwachstellen

Published Sep 28, 2026 · Updated Sep 28, 2026 · de-DE

Vendor: Wind River Systems Product: VxWorks

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Wind River VxWorks ausnutzen, um einen Denial of Service Angriff durchzuführen, möglicherweise beliebigen Code auszuführen und Daten offenzulegen oder zu manipulieren.

Product

VxWorks ist ein proprietäres Echtzeitbetriebssystem, das von Wind River Systems entwickelt wird.

Vulnerabilities 4

  • High 7.8
    CVE-2026-102004

    VxWorks 7

    Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09

    Wind River Systems VxWorks 7
  • Medium 5.5
    CVE-2026-102005

    VxWorks Memory Allocation

    Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 2…

    Wind River Systems VxWorks 7
  • Medium 5.5
    CVE-2026-102006

    VxWorks 7 Memory allocation

    In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09

    Wind River Systems VxWorks 7
  • Medium 5.5
    CVE-2026-97686

    VxWorks 7 Memory Resource leak

    Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09.

    Wind River Systems VxWorks 7

Revision history

  1. #1

    Initiale Fassung

References