CVE-2026-19380
LowCVSS 2.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability was identified in Mullvad wireguard.sys 0.10.1, affecting the function AdapterState in the IOCTL Handler component. Manipulation leads to improper update of reference count. Local access is required, and the exploit is publicly available.
Risk Assessment
The risk for the organization includes improper reference count management, which may lead to system crashes or privilege escalation. The publicly available exploit increases the risk of attack.
Recommendation
It is recommended to update the wireguard.sys driver to the latest version or apply temporary measures, such as restricting local access to the system, until a patch is released.
Original NVD description (English source)
A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.