By weakness (CWE)

CWE-179: related vulnerabilities

CVEs classified under CWE-179. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-49414HIGH 7.8

  A timing-of-checks flaw in FreeBSD's ELF image loader allows unprivileged users to disable address space layout randomization (ASLR) on setuid binaries. An attacker can call procctl(2) before execve(2) to disable ASLR, causing the kernel to compute the binary's base address without ASLR protection—even though the flag should have been cleared before that computation. This dramatically reduces the difficulty of exploiting memory corruption bugs in setuid programs that would normally rely on ASLR as a mitigation.