CVE-2026-27143

Go toolchain cmd/compile

Medium priority: severe, but no known exploitation

Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.

In the news

• Múltiples vulnerabilidades en productos de Splunk · INCIBE-CERT