Microsoft Security Response Center guidance
Vendor revision: Nov 3, 2026Release Notes
Vulnerability intelligence
CVE-2026-114690 and is rated Medium severity with a CVSS score of 6.2. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer.
A local attacker can exploit this flaw by providing crafted search data to an application compiled with parallel mode, causing the process to crash and leading to a Denial of Service (DoS).
Source: NVD