{"id":"CVE-2026-7310","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-7310","generatedAt":"2026-10-28T01:43:17.277Z","title":"A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw.","description":"A heap-based buffer overflow vulnerability exists in XML\nparser functionality in the HiDraw. An authenticated\nmalicious user with local access can exploit this\nvulnerability using a specially crafted XML file which may\nlead to memory corruption and potential arbitrary code\nexecution. Successful exploitation could result in\napplication crashes (denial of service) and compromise the\nconfidentiality and integrity of the affected system.","published":"2026-05-26T14:16:41.000Z","lastModified":"2026-07-24T08:10:00.000Z","status":"Deferred","sourceIdentifier":"cybersecurity@hitachienergy.com","cvss":{"version":"4.0","score":4.4,"severity":"MEDIUM","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-122"],"affected":[],"epss":{"score":0.00103,"percentile":0.00982,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://publisher.hitachienergy.com/preview?DocumentID=8DBD000248&LanguageCode=en&DocumentPartId=&Action=Launch","source":"cybersecurity@hitachienergy.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-7310","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}