CVE-2026-6390

Microsoft · Published July 25, 2026

6.8

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.. Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.

Affected Products

azl3 nano 6.4-3 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H