{"id":"CVE-2026-40274","published":"2026-11-10T19:21:16.033","lastModified":"2026-11-10T19:21:16.033","description":"Invalid Pointer Reference in the TimerSettime() system call could allow an attacker with local access to arm a crafted timer event which can cause an information disclosure in the QNX Neutrino kernel.","cvssScore":4,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-822"],"vendors":[],"products":[],"references":[{"url":"https://support.blackberry.com/pkb/s/article/141342","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}