CVE Intelligence

Golang.org/x/sys vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Golang.org/x/sys products: 1 record(s), with severity, exploitation and fixes.

Golang.org/x/sys/windows 1

Exploited only (KEV) →

CVE-2026-39824 Low · 3.3 CWE-190 May 22, 2026
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.