HighCVE-2026-43284

    C1-Premium: Write-what-where Condition (CVE-2026-43284)

    Published Sources: BSI

    Share

    What is affected, what to do

    A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges.

    The vulnerability is being actively exploited; treat it as a priority. Update Linux Kernel to version 5.10.255, Linux Kernel to version 5.15.205, Linux Kernel to version 6.1.171.

    Affected
    • Linux Kernel lt 4.11..5.10.255
    • Linux Kernel lt 5.11..5.15.205
    • Linux Kernel lt 5.16..6.1.171
    • Linux Kernel lt 6.2..6.6.138
    • Linux Kernel lt 6.7..6.12.87
    • Linux Kernel lt 6.13..6.18.28
    • Linux Kernel lt 6.19..7.0.5
    Fixed in
    • Linux Kernel 5.10.255
    • Linux Kernel 5.15.205
    • Linux Kernel 6.1.171
    • Linux Kernel 6.6.138
    • Linux Kernel 6.12.87
    • Linux Kernel 6.18.28
    • Linux Kernel 7.0.5
    • Linux Kernel 7.1

    Not sure whether and how you are affected? Ask a question about this vulnerability

    Metrics

    8.8

    Priority

    XIEM Effective CVSS: highest available CVSS rating from NVD and vendor data.

    Source: Vendor (CNA), CVSS v3

    8.8

    CVSS v3

    Severity High on the scale from 0 to 10.

    Source: BSI

    94.2 %

    EPSS score

    High — model estimates ≥ 50% chance of real-world exploitation within 30 days.

    Source: FIRST EPSS, percentile 99.85

    Show all metrics
    Severity
    High
    Priority (0–325)

    The priority score is a consolidated metric that condenses several individual signals into a single, action-guiding ranking: technical severity (CVSS), exploitation likelihood (EPSS), known-exploited status (KEV) and the context of the affected asset. The aim is to answer the only truly important question in vulnerability management: what first?

    Read in glossary
    69.01 Methodology
    Exploit maturity

    An exploit is code or a technique that specifically uses a concrete vulnerability to force unintended behaviour — such as executing code or escalating privileges. It is the tool that turns a theoretical flaw into a practical attack.

    Read in glossary
    actively exploitedSource: VulnCheck KEV (opens in a new tab) How we classify
    XIEM Effective CVSS

    XIEM® is the tiered managed-security operating model from NEOSEC and a registered trademark of NEOSEC GmbH. It extends classic SIEM — the central collection, normalisation and correlation of security-relevant events — with endpoint forensics, network visibility and deception technology, and consolidates them into three building tiers: Sentry, Orchestrate and Command.

    Read in glossary
    8.8 Methodology
    CVSS v3

    CVSS is the globally established, open standard for assessing the technical severity of a vulnerability on a scale from 0 to 10. It describes how easily a flaw can be exploited and what damage it can cause — but not how likely its actual exploitation is. CVSS and the complementary EPSS deliberately answer different questions.

    Read in glossary
    8.8
    EPSS score

    The EPSS score is the absolute model output for an individual vulnerability: the estimated probability of real-world exploitation within the next 30 days, expressed as a value between 0 and 1 (i.e. 0 % to 100 %). A score of 0.42 means „the model estimates a 42 % chance of real-world exploitation within 30 days“.

    Read in glossary
    94.2 %
    High — model estimates ≥ 50% chance of real-world exploitation within 30 days.
    EPSS percentile

    The EPSS percentile is the relative position of a vulnerability within all EPSS-scored CVEs, expressed as a value between 0 and 1. A percentile of 0.90 means „this CVE has a higher EPSS score than 90 % of all other scored CVEs“. Unlike the EPSS score, it is not a probability — but a positioning within a ranking.

    Read in glossary
    99.85
    Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
    KEV status

    The KEV catalogue is a list maintained by the US authority CISA of vulnerabilities for which active exploitation in the wild has been confirmed. It answers not the question „how severe?“ but „is it already being attacked?“ — thereby sharply prioritising patching.

    Read in glossary
    —
    Published
    CISA assessment (SSVC)
    Exploitation: proof of concept · not automatable · Technical impact: total
    Source: CISA Vulnrichment, as of 8 May 2026
    CWE

    CWE is a catalogue of typical weakness types in software and hardware — such as flawed input validation, unsafe memory handling or poor authentication. Where a CVE names a concrete vulnerability in a concrete product, a CWE describes the underlying class of defect.

    Read in glossary
    CWE-123

    Detection rules

    No NEOSEC detection rule is available for this vulnerability yet.

    Classification under NIS2 and CRA

    Rule-based classification from exploitation status and severity. It does not replace a case-by-case assessment.

    NIS2

    NIS2 is EU Directive (EU) 2022/2555 to raise the level of cybersecurity across the Union. It substantially broadens obligations compared with the first NIS directive: more sectors, mandatory risk management, staged reporting duties and personal accountability of senior management.

    Read in glossary
    Actively exploited: treat the vulnerability as a priority in vulnerability handling under Art. 21(2)(e) NIS2. If it is exploited in your environment, check the reporting obligation under Art. 23 (early warning within 24 hours).
    CRA

    The CRA is EU Regulation (EU) 2024/2847 setting horizontal cybersecurity requirements for „products with digital elements“ — from industrial controllers and software to connected consumer devices. For the first time manufacturers must ensure security across the entire product lifecycle, handle vulnerabilities and provide security updates.

    Read in glossary
    Since 11.09.2026, manufacturers of affected products with digital elements must report actively exploited vulnerabilities under Art. 14 CRA, with an early warning within 24 hours via ENISA's single reporting platform.
    ISO/IEC 27001

    ISO/IEC 27001 is the internationally leading standard for an information security management system (ISMS). It describes a risk-based, process-oriented framework to systematically plan, implement, review and improve information security.

    Read in glossary
    Control A.8.8, management of technical vulnerabilities: assess relevance to your systems, plan remediation and keep evidence.

    Description

    A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The xfrm-ESP variant requires unprivileged user or network namespace creation, while the RxRPC variant depends on the rxrpc module being available on the target system.

    Source: BSI WID Portal

    Affected products

    The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

    Affected products
    Affected versionsFixed in
    ArmC1-Premium
    • 0
    • —
    ArmC1-Ultra
    • 0
    • —
    ArmCortex-A710
    • 0
    • —
    ArmCortex-X2
    • 0
    • —
    ArmCortex-X3
    • 0
    • —
    ArmCortex-X4
    • 0
    • —
    ArmCortex-X925
    • 0
    • —
    ArmNeoverse-N2
    • 0
    • —
    ArmNeoverse-V2
    • 0
    • —
    ArmNeoverse-V3
    • 0
    • —
    ArmNeoverse-V3AE
    • 0
    • —
    Arm LtdArm 5th Gen GPU Architecture Kernel Driver
    • ≥ r41p0
    • ≥ r50p0
    • r55p0
    • —
    • —
    • —
    Arm LtdArm 5th Gen GPU Architecture Userspace Driver
    • ≥ r46p0
    • ≥ r50p0
    • r55p0
    • —
    • —
    • —
    Arm LtdBifrost GPU Kernel Driver
    • ≥ r12p0
    • ≥ r50p0
    • ≥ r54p1
    • —
    • —
    • —
    Arm LtdValhall GPU Kernel Driver
    • ≥ r19p0
    • ≥ r50p0
    • r55p0
    • —
    • —
    • —
    Arm LtdValhall GPU Userspace Driver
    • ≥ r46p0
    • ≥ r50p0
    • r55p0
    • —
    • —
    • —
    GoogleAndroid
    • 14
    • 15
    • 16
    • 16-qpr2
    • 17
    • Android kernel
    • —
    • —
    • —
    • —
    • —
    • —
    GoogleAndroid XR
    • 14
    • —
    Imagination TechnologiesGraphics DDK
    • 1.18 RTM
    • 1.18 RTM2
    • 23.2 RTM
    • 23.2 RTM2
    • ≥ 24.1 RTM
    • 24.2 RTM
    • 24.2 RTM2
    • ≥ 25.1 RTM
    • ≥ 25.1 RTM2
    • 26.1 RTM
    • 26.1 RTM1
    • 26.1 RTM2
    • —
    • —
    • —
    • —
    • —
    • —
    • —
    • —
    • —
    • —
    • —
    • —
    LinuxLinux
    • 2.6.12 – < 5.10.259
    • 2.6.39 – < 5.10.261
    • 3.10.10 – < 3.11
    • 5.10.259
    • 5.10.261
    • 3.11
    From bundled advisories, not CVE-specific (30)

    Product list of a bundled advisory that does not state which product this CVE affects.

    Products from bundled advisories
    Affected versionsFixed in
    androidandroid
    • Android 12 and 13 (no fix released)
    • Android 12 through 17 before the October 2026 security update (crash reproduced on Android 12 through 16)
    • Android 14, 15, 16, 16-qpr2, 17 (CVE-2026-58868 and related Framework/System issues)
    • —
    • —
    • —
    DellECS
    • 3.8.1.0-3.8.1.7
    • —
    DellNetWorker
    • Virtual Edition
    • —
    DellNetWorker vProxy
    • < 19.14
    • 19.14
    DellSecure Connect Gateway Appliance
    • < 5.32.00.18
    • 5.32.00.18
    MicrosoftAzure Linux
    • azl3
    • —
    MicrosoftExchange
    • Server 2016 Cumulative Update 23
    • Server 2019 Cumulative Update 14
    • Server 2019 Cumulative Update 15
    • —
    • —
    • —
    MicrosoftWindows
    • App Client for Desktop
    • —
    MicrosoftWindows 10
    • Version 1607
    • Version 1809
    • Version 21H2
    • Version 22H2
    • —
    • —
    • —
    • —
    MicrosoftWindows 11
    • Version 23H2
    • Version 24H2
    • Version 25H2
    • Version 26H1
    • —
    • —
    • —
    • —
    NetAppActiveIQ Unified Manager
    • for VMware vSphere
    • —
    NetAppAFF
    • Baseboard Management Controller
    • —
    NetAppFAS
    • Baseboard Management Controller
    • —
    Open SourceLinux Kernel
    • < 6.12.87
    • < 6.18.28
    • < 6.6.138
    • < 7.0.5
    • 6.12.87
    • 6.18.28
    • 6.6.138
    • 7.0.5
    Red HatOpenShift Container Platform
    • < 4.14.66
    • < 4.20.22
    • 4.14.66
    • 4.20.22
    Red HatOpenStack
    • Container Platform 4.12.90
    • —

    Vendors and products

    Affected operating systems

    Affected operating systems
    Linuxubuntuawsbionic
    Linuxubuntuawsjammy
    Linuxubuntuawsnoble
    Linuxubuntuawsresolute
    Linuxubuntuawsxenial
    Linuxubuntuaws-6.8jammy
    Linuxubuntuaws-hwexenial
    Linuxubuntuazurejammy
    Linuxubuntuazurenoble
    Linuxubuntuazureresolute
    Linuxubuntuazurexenial
    Linuxubuntuazure-4.15bionic
    Linuxubuntugcpjammy
    Linuxubuntugcpnoble
    Linuxubuntugcpresolute
    Linuxubuntugcpxenial
    Linuxubuntugcp-4.15bionic
    Linuxubuntugcp-6.8jammy
    Linuxubuntugeneric-4.15bionic
    Linuxubuntugeneric-4.15xenial
    Linuxubuntugeneric-4.4xenial
    Linuxubuntugeneric-5.4bionic
    Linuxubuntugeneric-5.4focal
    Linuxubuntugkejammy

    Weakness classes (CWE)

    • CWE-123Write-what-where Condition

      Base

      Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

      Entry at MITRE CWE-123

    Public exploit references

    Publicly reported proof-of-concepts, exploit modules and detection templates for this vulnerability. NEOSEC links to the original sources only and does not provide any exploit code.

    Public exploit references
    Reference tagged as exploitgithub.com (opens in a new tab)PoC (publicly reported)reported, not verified—
    PoC-in-GitHub (nomi-sec)DirtyFrag (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)dirtyfrag-research (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)DirtyFrag-Android-Root-Jailbreak (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)dirtyfrag-audit (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)DirtyFrag-Galaxy (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)DFRoot (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)CVE-2026-43284-DIRTY-FRAG- (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)DirtyFrag (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)SG-2026-0024 (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)dirtyfrag-detection-rules (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)CVE-2026-43284---DirtyFrag-Analysis-THM- (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)CVE-2026-43284 (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)Dirty-Frag-Research-CVE-2026-43284- (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)tetragon-dirtyfrag (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)redtail-ioc (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)dirtyfrag-cve-2026-43284-auditd-detection (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)DirtyFrag (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)CVE-2026-43284-DirtyFrag-PoC (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)Dirty-Frag-CVE-2026-43284 (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)rust_dirtyfrag (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)Dirtyfrag-go (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)Dirty-Frag-CVE-2026-43284 (opens in a new tab)github.comPoC (publicly reported)reported, not verified
    PoC-in-GitHub (nomi-sec)CVE-2026-43284 (opens in a new tab)github.comPoC (publicly reported)reported, not verified

    References & sources

    Changes to this CVE

    Who changed this CVE and when: NVD (analysis, affected products, CVSS), the CVE publisher (CNA) and additional providers such as CISA (ADP).

    1. Record modifiedLinux

      Show 27 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Referenceadded
      —
      https://git.kernel.org/stable/c/50ed1e7873100f77abad20fd31c51029bc49cd03
      Referenceadded
      —
      https://git.kernel.org/stable/c/52646cbd00e765a6db9c3afe9535f26218276034
      Referenceadded
      —
      https://git.kernel.org/stable/c/5d55c7336f8032d434adcc5fab987ccc93a44aec
      Referenceadded
      —
      https://git.kernel.org/stable/c/71a1d9d985d26716f74d21f18ee8cac821b06e97
      Referenceadded
      —
      https://git.kernel.org/stable/c/8253aab4659ca16116b522203c2a6b18dccacea7
      Referenceadded
      —
      https://git.kernel.org/stable/c/a6cb440f274a22456ef3e86b457344f1678f38f9
      Referenceadded
      —
      https://git.kernel.org/stable/c/ab8b995323e5237041472d07e5055f5f7dcdf15b
      Referenceadded
      —
      https://git.kernel.org/stable/c/b54edf1e9a3fd3491bdcb82a21f8d21315271e0d
      Referenceadded
      —
      https://git.kernel.org/stable/c/f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4
      Referenceadded
      —
      https://git.kernel.org/stable/c/fe785bb3a8096dffcc4048a85cd0c83337eeecad
      Referenceremoved
      https://git.kernel.org/stable/c/50ed1e7873100f77abad20fd31c51029bc49cd03
      —
      Referenceremoved
      https://git.kernel.org/stable/c/52646cbd00e765a6db9c3afe9535f26218276034
      —
      Referenceremoved
      https://git.kernel.org/stable/c/5d55c7336f8032d434adcc5fab987ccc93a44aec
      —
      Referenceremoved
      https://git.kernel.org/stable/c/71a1d9d985d26716f74d21f18ee8cac821b06e97
      —
      Referenceremoved
      https://git.kernel.org/stable/c/8253aab4659ca16116b522203c2a6b18dccacea7
      —
      Referenceremoved
      https://git.kernel.org/stable/c/a6cb440f274a22456ef3e86b457344f1678f38f9
      —
      Referenceremoved
      https://git.kernel.org/stable/c/ab8b995323e5237041472d07e5055f5f7dcdf15b
      —
      Referenceremoved
      https://git.kernel.org/stable/c/b54edf1e9a3fd3491bdcb82a21f8d21315271e0d
      —
      Referenceremoved
      https://git.kernel.org/stable/c/f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4
      —
      Referenceremoved
      https://git.kernel.org/stable/c/fe785bb3a8096dffcc4048a85cd0c83337eeecad
      —
      Reference typeremoved
      https://git.kernel.org/stable/c/50ed1e7873100f77abad20fd31c51029bc49cd03 Types: Patch
      —
      Reference typeremoved
      https://git.kernel.org/stable/c/52646cbd00e765a6db9c3afe9535f26218276034 Types: Patch
      —
      Reference typeremoved
      https://git.kernel.org/stable/c/5d55c7336f8032d434adcc5fab987ccc93a44aec Types: Patch
      —
      Reference typeremoved
      https://git.kernel.org/stable/c/71a1d9d985d26716f74d21f18ee8cac821b06e97 Types: Patch
      —
      Reference typeremoved
      https://git.kernel.org/stable/c/a6cb440f274a22456ef3e86b457344f1678f38f9 Types: Patch
      —
      Reference typeremoved
      https://git.kernel.org/stable/c/ab8b995323e5237041472d07e5055f5f7dcdf15b Types: Patch
      —
      Reference typeremoved
      https://git.kernel.org/stable/c/b54edf1e9a3fd3491bdcb82a21f8d21315271e0d Types: Patch
      —

      Source identifier: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    2. Record modifiedCISA ADP

      Show 3 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Referenceadded
      —
      https://github.com/V4bel/dirtyfrag
      Referenceremoved
      https://github.com/V4bel/dirtyfrag
      —
      Reference typeremoved
      https://github.com/V4bel/dirtyfrag Types: Exploit, Third Party Advisory
      —

      Source identifier: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    3. Record modifiedCVE Program

      Show 13 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Referenceadded
      —
      http://www.openwall.com/lists/oss-security/2026/05/08/7
      Referenceadded
      —
      http://www.openwall.com/lists/oss-security/2026/05/13/6
      Referenceadded
      —
      http://www.openwall.com/lists/oss-security/2026/05/14/2
      Referenceadded
      —
      http://www.openwall.com/lists/oss-security/2026/05/14/4
      Referenceadded
      —
      https://www.vicarius.io/vsociety/posts/cve-2026-43284-detection-script-dirty-frag-linux-kernel-local-privilege-escalation
      Referenceadded
      —
      https://www.vicarius.io/vsociety/posts/cve-2026-43284-mitigation-script-dirty-frag-linux-kernel-local-privilege-escalation
      Referenceremoved
      http://www.openwall.com/lists/oss-security/2026/05/08/7
      —
      Referenceremoved
      http://www.openwall.com/lists/oss-security/2026/05/13/6
      —
      Referenceremoved
      http://www.openwall.com/lists/oss-security/2026/05/14/2
      —
      Referenceremoved
      http://www.openwall.com/lists/oss-security/2026/05/14/4
      —
      Referenceremoved
      https://www.vicarius.io/vsociety/posts/cve-2026-43284-detection-script-dirty-frag-linux-kernel-local-privilege-escalation
      —
      Referenceremoved
      https://www.vicarius.io/vsociety/posts/cve-2026-43284-mitigation-script-dirty-frag-linux-kernel-local-privilege-escalation
      —
      Reference typeremoved
      http://www.openwall.com/lists/oss-security/2026/05/08/7 Types: Mailing List
      —

      Source identifier: af854a3a-2127-422b-91ae-364da2661108

    4. Record modifiedRed Hat ADP

      Show 82 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16061
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16062
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16100
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16155
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16157
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16160
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16161
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16171
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16176
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16180
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16195
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16196
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16201
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16202
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16203
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16204
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16206
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16254
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16312
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16314
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:16328
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:17795
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:18025
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19074
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19225
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19564
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19568
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19569
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19572
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19573
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19574
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19575
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:19577
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:21695
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:23233
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:26542
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:33486
      Referenceadded
      —
      https://access.redhat.com/errata/RHSA-2026:34098
      Referenceadded
      —
      https://access.redhat.com/security/cve/CVE-2026-43284
      Referenceadded
      —
      https://bugzilla.redhat.com/show_bug.cgi?id=2467771
      Referenceadded
      —
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43284.json
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16061
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16062
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16100
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16155
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16157
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16160
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16161
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16171
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16176
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16180
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16195
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16196
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16201
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16202
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16203
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16204
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16206
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16254
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16312
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16314
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:16328
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:17795
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:18025
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19074
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19225
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19564
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19568
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19569
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19572
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19573
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19574
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19575
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:19577
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:21695
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:23233
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:26542
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:33486
      —
      Referenceremoved
      https://access.redhat.com/errata/RHSA-2026:34098
      —
      Referenceremoved
      https://access.redhat.com/security/cve/CVE-2026-43284
      —
      Referenceremoved
      https://bugzilla.redhat.com/show_bug.cgi?id=2467771
      —
      Referenceremoved
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43284.json
      —

      Source identifier: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

    5. Record modifiedSiemens ADP

      Show 5 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Affected versions (publisher)added
      —
      Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/43xxx/CVE-2026-43284.json">CVE-2026-43284</a>
      Referenceadded
      —
      https://cert-portal.siemens.com/productcert/html/ssa-019113.html
      Referenceadded
      —
      https://cert-portal.siemens.com/productcert/html/ssa-082556.html
      Referenceremoved
      https://cert-portal.siemens.com/productcert/html/ssa-019113.html
      —
      Referenceremoved
      https://cert-portal.siemens.com/productcert/html/ssa-082556.html
      —

      Source identifier: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

    Linked CVEs

    Linked CVEs
    HighCVE-2026-9040Mali GPU Kernel Driver allows denial of service or disclosure of sensitive information7.7—
    HighCVE-2026-89774Linux Kernel: security vulnerability8.8—
    HighCVE-2026-80604Linux Kernel: Out-of-Bounds Read8.8—
    Not ratedCVE-2026-80336Google Android: security vulnerability——
    HighCVE-2026-80335Out-of-bounds Write in Bootloader8.4—
    HighCVE-2026-79405Improper Input Validation in Modem Firmware7.5—
    CriticalCVE-2026-74912GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB9.8—
    HighCVE-2026-6726Trusted Computing Group TPM2.0: Incorrect Type Conversion or Cast7.9—
    Not ratedCVE-2026-66114Google Android: security vulnerability——
    Not ratedCVE-2026-66113Google Android: security vulnerability——
    HighCVE-2026-66086Stack-based Buffer Overflow in Modem8.3—
    MediumCVE-2026-65587GPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change5.5—
    HighCVE-2026-65586Imagination Technologies Graphics DDK: Use After Free7.1—
    Not ratedCVE-2026-65076Google Android: security vulnerability——
    HighCVE-2026-64560Linux Kernel: Race Condition7.8—
    MediumCVE-2026-64427Linux Kernel: NULL Pointer Dereference5.5—
    HighCVE-2026-64011Linux Kernel: Use-After-Free7.8—
    MediumCVE-2026-59048Google Android: Out-of-bounds Read5.5—
    MediumCVE-2026-59047Google Android: Improper Input Validation6.2—
    MediumCVE-2026-59046Google Android: Improper Input Validation6.2—
    HighCVE-2026-59045Google Android: Race Condition7.4—
    HighCVE-2026-59044Google Android: Use After Free8.4—
    HighCVE-2026-59043Google Android: Race Condition7.4—
    HighCVE-2026-59042Google Android: Race Condition7.4—
    Show 201 more CVEs
    Linked CVEs
    MediumCVE-2026-59031Google Android: Protection Mechanism Failure6.2—
    HighCVE-2026-59028Google Android: Confused Deputy8.4—
    MediumCVE-2026-59022Google Android: Incorrect Authorization5.5—
    MediumCVE-2026-59021Google Android: Improper Input Validation6.2—
    MediumCVE-2026-59020Google Android: Race Condition5.9—
    HighCVE-2026-59016Google Android: Path Traversal8.4—
    MediumCVE-2026-59015Google Android: Confused Deputy4.0—
    HighCVE-2026-59014Google Android: Out-of-bounds Write8.4—
    MediumCVE-2026-59012Google Android: Missing Authorization5.5—
    MediumCVE-2026-59011Google Android: Improper Authorization5.5—
    MediumCVE-2026-59010Google Android: Improper Restriction of Operations within the Bounds of a Memory Buffer6.2—
    MediumCVE-2026-59008Google Android: Improper Input Validation6.2—
    MediumCVE-2026-59007Google Android: Out-of-bounds Read5.3—
    MediumCVE-2026-59006Google Android: User Interface (UI) Misrepresentation of Critical Information4.0—
    HighCVE-2026-59005Google Android: Missing Authorization8.4—
    HighCVE-2026-59004Google Android: Uncaught Exception8.4—
    MediumCVE-2026-59003Google Android: Missing Authorization4.0—
    MediumCVE-2026-59002Google Android: Protection Mechanism Failure4.6—
    MediumCVE-2026-59001Google Android: Missing Authorization4.0—
    HighCVE-2026-59000Google Android: Confused Deputy8.4—
    MediumCVE-2026-58997Google Android: Out-of-bounds Read4.0—
    HighCVE-2026-58995Google Android: Heap-based Buffer Overflow8.4—
    HighCVE-2026-58994Google Android: Missing Authorization8.4—
    MediumCVE-2026-58990Google Android: Integer Overflow or Wraparound5.3—
    HighCVE-2026-58989Google Android: Missing Authorization8.4—
    MediumCVE-2026-58988Google Android: Improper Restriction of Operations within the Bounds of a Memory Buffer4.0—
    HighCVE-2026-58986Google Android: Missing Authorization8.4—
    MediumCVE-2026-58985Google Android: Improper Input Validation6.2—
    HighCVE-2026-58984Google Android: Use After Free8.4—
    HighCVE-2026-58979Google Android: Protection Mechanism Failure8.4—
    MediumCVE-2026-58978Google Android: Protection Mechanism Failure6.8—
    MediumCVE-2026-58976Google Android: Exposure of Sensitive Information to an Unauthorized Actor4.0—
    HighCVE-2026-58975Google Android: Improper Restriction of Operations within the Bounds of a Memory Buffer8.4—
    HighCVE-2026-58974Google Android: Improper Privilege Management8.4—
    MediumCVE-2026-58971Google Android: Integer Overflow or Wraparound4.0—
    HighCVE-2026-58970Google Android: Confused Deputy8.4—
    MediumCVE-2026-58969Google Android: Missing Authorization4.0—
    CriticalCVE-2026-58968Google Android: Double Free9.8—
    HighCVE-2026-58966Google Android: Stack-based Buffer Overflow8.4—
    HighCVE-2026-58965Google Android: Confused Deputy8.4—
    HighCVE-2026-58964Google Android: Improper Input Validation8.4—
    HighCVE-2026-58963Google Android: Improper Input Validation7.5—
    HighCVE-2026-58962Google Android: Improper Privilege Management8.4—
    HighCVE-2026-58961Google Android: Protection Mechanism Failure8.4—
    HighCVE-2026-58957Google Android: Confused Deputy8.4—
    HighCVE-2026-58956Google Android: Protection Mechanism Failure8.4—
    MediumCVE-2026-58955Google Android: Improper Input Validation6.2—
    MediumCVE-2026-58953Google Android: Heap-based Buffer Overflow5.3—
    MediumCVE-2026-58951Google Android: Missing Authorization4.0—
    HighCVE-2026-58949Google Android: Stack-based Buffer Overflow7.5—
    HighCVE-2026-58946Google Android: Protection Mechanism Failure8.4—
    MediumCVE-2026-58945Google Android: Observable Discrepancy4.3—
    HighCVE-2026-58944Google Android: Confused Deputy8.4—
    HighCVE-2026-58943Google Android: Confused Deputy8.4—
    HighCVE-2026-58942Google Android: Use After Free8.4—
    HighCVE-2026-58938Google Android: Improper Input Validation7.5—
    MediumCVE-2026-58937Google Android: Improper Input Validation6.2—
    CriticalCVE-2026-58936Google Android: Use After Free9.8—
    HighCVE-2026-58934Google Android: Protection Mechanism Failure8.4—
    MediumCVE-2026-58933Google Android: Out-of-bounds Read5.3—
    HighCVE-2026-58930Google Android: User Interface (UI) Misrepresentation of Critical Information7.8—
    MediumCVE-2026-58927Google Android: Use After Free6.7—
    LowCVE-2026-58926Google Android: Use After Free2.5—
    HighCVE-2026-58925Google Android: Use After Free7.8—
    HighCVE-2026-58924Google Android: Out-of-bounds Read7.5—
    MediumCVE-2026-58915Google Android: Improper Authentication6.1—
    HighCVE-2026-58886Google Android: User Interface (UI) Misrepresentation of Critical Information7.8—
    HighCVE-2026-58885Google Android: Confused Deputy8.4—
    HighCVE-2026-58884Google Android: Confused Deputy8.4—
    HighCVE-2026-58883Google Android: Protection Mechanism Failure7.5—
    HighCVE-2026-58882Google Android: Integer Overflow or Wraparound7.5—
    HighCVE-2026-58879Google Android: Out-of-bounds Write8.4—
    MediumCVE-2026-58877Google Android: Confused Deputy4.0—
    CriticalCVE-2026-58876Google Android: Use After Free9.8—
    MediumCVE-2026-58875Google Android: Improper Input Validation6.2—
    HighCVE-2026-58873Google Android XR: Missing Authorization8.4—
    HighCVE-2026-58871Google Android: Heap-based Buffer Overflow8.4—
    MediumCVE-2026-58870Google Android: Missing Authorization4.0—
    CriticalCVE-2026-58868Google Android: Out-of-bounds Write9.8—
    HighCVE-2026-58867Google Android: Missing Authorization8.4—
    HighCVE-2026-58866Google Android: Missing Authorization8.4—
    HighCVE-2026-58857Google Android: Use After Free8.1—
    HighCVE-2026-58853Google Android: Improper Restriction of Operations within the Bounds of a Memory Buffer7.5—
    HighCVE-2026-58847Google Android: Protection Mechanism Failure8.4—
    HighCVE-2026-58845Google Android: Integer Overflow or Wraparound8.4—
    HighCVE-2026-58844Google Android: Out-of-bounds Read8.4—
    MediumCVE-2026-58838Google Android: Improper Input Validation4.0—
    HighCVE-2026-58837Google Android: Protection Mechanism Failure8.4—
    HighCVE-2026-58836Google Android: Protection Mechanism Failure7.8—
    HighCVE-2026-58829Google Android: Use After Free8.4—
    HighCVE-2026-58828Google Android: Use After Free8.4—
    HighCVE-2026-58827Google Android: Use After Free8.4—
    HighCVE-2026-58826Google Android: Use After Free8.4—
    HighCVE-2026-58825Google Android: Use After Free8.4—
    HighCVE-2026-58824Google Android: Improper Restriction of Operations within the Bounds of a Memory Buffer8.4—
    MediumCVE-2026-58821Google Android: SQL Injection6.2—
    MediumCVE-2026-58817Google Android: Improper Input Validation6.2—
    HighCVE-2026-58814Google Android: Integer Overflow or Wraparound7.5—
    HighCVE-2026-57554Use After Free in DSP Service7.8—
    Not ratedCVE-2026-57549Google Android: security vulnerability——
    Not ratedCVE-2026-57548Google Android: security vulnerability——
    Not ratedCVE-2026-57547Google Android: security vulnerability——
    HighCVE-2026-57546Buffer Over-read in WLAN HAL7.5—
    HighCVE-2026-57545Untrusted Pointer Dereference in Graphics7.8—
    HighCVE-2026-57537Use After Free in DSP Service7.8—
    MediumCVE-2026-55292Google Android: Integer Overflow or Wraparound5.3—
    HighCVE-2026-55289Google Android: Confused Deputy8.4—
    HighCVE-2026-55288Google Android: Uncaught Exception8.4—
    HighCVE-2026-55287Google Android: User Interface (UI) Misrepresentation of Critical Information8.4—
    HighCVE-2026-55283Google Android: Use After Free8.4—
    HighCVE-2026-55275Google Android: Use After Free8.4—
    MediumCVE-2026-55272Google Android: Improper Input Validation6.2—
    HighCVE-2026-55271Google Android: Confused Deputy8.4—
    MediumCVE-2026-55264Google Android: Confused Deputy4.0—
    HighCVE-2026-55263Google Android: User Interface (UI) Misrepresentation of Critical Information8.4—
    HighCVE-2026-55262Google Android: Improper Input Validation8.4—
    HighCVE-2026-55261Google Android: Missing Authorization8.4—
    HighCVE-2026-55257Google Android: User Interface (UI) Misrepresentation of Critical Information8.4—
    HighCVE-2026-53256Linux Kernel: Use After Free8.0—
    MediumCVE-2026-49935Google Android: Path Traversal4.0—
    HighCVE-2026-49934Google Android: Improper Input Validation7.8—
    HighCVE-2026-49931Google Android: Confused Deputy8.4—
    MediumCVE-2026-49924Google Android: Uncontrolled Resource Consumption6.2—
    HighCVE-2026-49923Google Android: User Interface (UI) Misrepresentation of Critical Information8.4—
    HighCVE-2026-49922Google Android: Confused Deputy8.4—
    MediumCVE-2026-49912Google Android: Protection Mechanism Failure4.0—
    HighCVE-2026-49906Google Android: Confused Deputy7.8—
    MediumCVE-2026-49903Google Android: Confused Deputy5.3—
    HighCVE-2026-46242Linux Kernel: Use After Free7.8—
    HighCVE-2026-46232Linux Kernel: security vulnerability8.1—
    Not ratedCVE-2026-45522Google Android: security vulnerability——
    HighCVE-2026-45514Google Android: Protection Mechanism Failure8.4—
    MediumCVE-2026-45204Imagination Technologies Graphics DDK: NULL Pointer Dereference5.5—
    HighCVE-2026-45201Imagination Technologies Graphics DDK: Improper Validation of Specified Quantity in Input7.8—
    HighCVE-2026-45199GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers7.8—
    HighCVE-2026-43499Linux Kernel: Use After Free7.8—
    HighCVE-2026-43284Linux Kernel: Write-what-where Condition8.8—
    MediumCVE-2026-41155GPU DDK - SharedSecMem mapped into all GPU virtual address spaces5.5—
    CriticalCVE-2026-31533Linux Kernel: Use After Free9.8—
    HighCVE-2026-28665Google Android: Improper Input Validation8.4—
    MediumCVE-2026-28645Google Android: Protection Mechanism Failure6.8—
    MediumCVE-2026-28643Google Android: Improper Input Validation6.2—
    MediumCVE-2026-28632Google Android: Protection Mechanism Failure4.0—
    MediumCVE-2026-28621Google Android: Missing Authorization4.0—
    HighCVE-2026-28597Google Android: Improper Input Validation8.4—
    HighCVE-2026-28588Google Android: Improper Access Control8.4—
    LowCVE-2026-28586Google Android: Improper Privilege Management3.3—
    HighCVE-2026-28580Google Android: Classic Buffer Overflow7.8—
    HighCVE-2026-25302Improper Verification of Cryptographic Signature in Boot7.1—
    Not ratedCVE-2026-25301Google Android: security vulnerability——
    HighCVE-2026-25291Use After Free in Graphics7.8—
    Not ratedCVE-2026-25287Google Android: security vulnerability——
    Not ratedCVE-2026-25286Google Android: security vulnerability——
    Not ratedCVE-2026-25285Google Android: security vulnerability——
    CriticalCVE-2026-23240Linux Kernel: Race Condition9.8—
    HighCVE-2026-23184Linux Kernel: Use-After-Free7.8—
    HighCVE-2026-22165Imagination Technologies Graphics DDK: Use After Free8.1—
    MediumCVE-2026-20589MediaTek chipset: Out-of-bounds Write6.7—
    HighCVE-2026-20586MediaTek chipset: Out-of-bounds Write8.8—
    HighCVE-2026-20565MediaTek chipset: Out-of-bounds Write8.4—
    MediumCVE-2026-20564MediaTek chipset: Out-of-bounds Write6.2—
    MediumCVE-2026-20563MediaTek chipset: Out-of-bounds Write5.3—
    MediumCVE-2026-20562MediaTek chipset: Improper Validation of Specified Quantity in Input5.3—
    MediumCVE-2026-20561MediaTek chipset: Out-of-bounds Read5.3—
    MediumCVE-2026-20560MediaTek chipset: Out-of-bounds Read5.3—
    HighCVE-2026-20559MediaTek chipset: Use After Free7.8—
    HighCVE-2026-20558MediaTek chipset: Use After Free8.4—
    HighCVE-2026-20557MediaTek chipset: Out-of-bounds Write7.5—
    HighCVE-2026-20556MediaTek chipset: Out-of-bounds Write7.5—
    MediumCVE-2026-20555MediaTek chipset: Out-of-bounds Read5.3—
    HighCVE-2026-20554MediaTek chipset: Out-of-bounds Write7.1—
    MediumCVE-2026-20553MediaTek chipset: Out-of-bounds Write6.8—
    HighCVE-2026-20549MediaTek chipset: Out-of-bounds Write7.5—
    HighCVE-2026-20548MediaTek chipset: Out-of-bounds Write7.5—
    HighCVE-2026-20547MediaTek chipset: Out-of-bounds Write7.5—
    HighCVE-2026-20546MediaTek chipset: Out-of-bounds Write7.5—
    HighCVE-2026-20545MediaTek chipset: Out-of-bounds Write7.5—
    MediumCVE-2026-20527MediaTek chipset: Improper Validation of Array Index5.3—
    HighCVE-2026-20526MediaTek chipset: Out-of-bounds Write7.1—
    MediumCVE-2026-20525MediaTek chipset: Reachable Assertion5.3—
    HighCVE-2026-20524MediaTek chipset: Improper Validation of Specified Index, Position, or Offset in Input8.4—
    HighCVE-2026-20523MediaTek chipset: Out-of-bounds Write8.4—
    HighCVE-2026-20522MediaTek chipset: Out-of-bounds Write8.4—
    HighCVE-2026-20521MediaTek chipset: Stack-based Buffer Overflow8.4—
    HighCVE-2026-20520MediaTek chipset: Out-of-bounds Write7.5—
    HighCVE-2026-20519MediaTek chipset: Out-of-bounds Write7.5—
    HighCVE-2026-20499MediaTek chipset: Out-of-bounds Write7.5—
    HighCVE-2026-19199GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet7.1—
    HighCVE-2026-18629Imagination Technologies Graphics DDK: Integer Overflow or Wraparound7.5—
    CriticalCVE-2026-16280GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset9.8—
    HighCVE-2026-15466Imagination Technologies Graphics DDK: Use After Free7.0—
    MediumCVE-2026-11891Mali GPU Userspace Driver allows access to already freed memory5.1—
    HighCVE-2026-0053Google Android: Improper Access Control8.4—
    MediumCVE-2025-48600Google Android: Missing Authorization5.5—
    HighCVE-2025-38627Linux Kernel: security vulnerability7.8—
    HighCVE-2025-26433Google Android: User Interface (UI) Misrepresentation of Critical Information8.4—
    HighCVE-2025-22442Google Android: Race Condition7.0—
    HighCVE-2025-22436Google Android: User Interface (UI) Misrepresentation of Critical Information8.4—
    HighCVE-2025-22426Google Android: Improper Access Control7.8—
    HighCVE-2025-22424Google Android: Improper Input Validation7.8—
    HighCVE-2025-0647Arm Neoverse-N2: Sensitive Information in Resource Not Removed Before Reuse7.9—

    Linked advisories

    Embed badge

    Show the severity and KEV status of this vulnerability on your site – with a link back here. The image is updated hourly.

    Badge preview for CVE-2026-43284
    <a href="https://intel.neosec.eu/en/cve/CVE-2026-43284"><img src="https://intel.neosec.eu/badge/cve/CVE-2026-43284.svg?lang=en" alt="CVE-2026-43284 – NEOSEC Intel" height="20"></a>