Read the docs

kyz

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

kyz records in CISA KEV

No kyz vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74096 CVE-2026-110602 · GHSA-5m37-fqj8-q94j

Uninitialized pointer free in libmspack KWAJ header handling

Priority MEDIUM 59

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00235 Published 2026-10-14 Fix deferred CWE-824
TI-2026-83087 CVE-2026-119602 · GHSA-xxh6-gw5r-86fm

Uninitialized memory disclosure in libmspack MS-ZIP decompressor

Priority LOW 28

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00307 Published 2026-10-30 Fix deferred CWE-908
Open these records in search →