> CVE-2026-38755 A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

[SOURCE] Microsoft Security Update Guide [DATE: 21/07/2026 08:42] [LANGUAGE: EN]

Information published.