Out-of-Bounds Write Vulnerability in IGSS Definition by Schneider Electric
CVE-2026-12927

8.4HIGH

Key Information:

Vendor

Schneider Electric
Status
Igss Definition (def.exe)
Vendor
CVE Published:
29 July 2026

What is CVE-2026-12927?

An out-of-bounds write vulnerability exists in IGSS Definition by Schneider Electric, which can lead to potential data loss or enable arbitrary code execution. This issue arises when importing malicious CGF files, exposing systems to significant risks. Users are advised to update their software to mitigate potential threats associated with this vulnerability.

Affected Version(s)

IGSS Definition (Def.exe) Version 18.0.0.26124 and prior

References

https://download.se.com/files?p_Doc_Ref=SEVD-2026-195-01&...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.