{"id":"CVE-2026-50215","title":"A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4","summary":"A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single…","severity":"medium","cvss":4.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"published":"2026-10-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T06:17:06.427","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-50215","references":[{"url":"https://techdocs.akamai.com/guardicore-platform-agent/changelog/","label":"cve@mitre.org"},{"url":"https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4","label":"cve@mitre.org"}],"tags":["nvd"],"ingestedAt":"2026-10-14T06:17:13.784Z","slug":"CVE-2026-50215","body":"## Overview\n\nA use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6_HDRINCL socket to trigger this at DISPATCH_LEVEL, resulting in an immediate system crash.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":24.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":219973,"id":"CVE-2026-50215","ts":1791962530678,"field":"cvss","old":null,"new":"4.4"},{"seq":219972,"id":"CVE-2026-50215","ts":1791962530678,"field":"severity","old":"none","new":"medium"}]}