CVE-2026-7270: Freebsd

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges.

Affected products

• Freebsd Freebsd: version 13.5 only; version 14.3 only; version 14.4 only; version 15.0 only

Published 2026-04-30. Last modified 2026-06-17.