CVE-2026-39824
UnscoredAdvisory
Published 22 May 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.001
- 2nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 3,843
- of 17,805 indexed, latest versions
- Container images
- 4,392
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
Carried by container images the latest versions of 3,843 of 17,805 indexed charts deploy, on 4,392 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+271 more | 0.44.0 | 4,392 |
- OSV records
- GO-2026-5024
Charts affected
3,843 by stars
Container images carrying it
4,392 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 073e7c8b84e2 | golang.org/ | 0.44.0 | 1 |
| library/ | 2d1e636f0778 | golang.org/ | 0.44.0 | 1 |
| library/ | 304ab8135187 | golang.org/ | 0.44.0 | 1 |
| library/ | 3a82e1f56c8f | golang.org/ | 0.44.0 | 1 |
| library/ | 44d837eb4c2e | golang.org/ | 0.44.0 | 1 |
| library/ | 468e1f126ca5 | golang.org/ | 0.44.0 | 1 |
| library/ | 54451ecb8ab3 | golang.org/ | 0.44.0 | 1 |
| library/ | 557fea37a744 | golang.org/ | 0.44.0 | 1 |
| library/ | 5c265bf1fd30 | golang.org/ | 0.44.0 | 1 |
| library/ | 6567bca8d7bc | golang.org/ | 0.44.0 | 1 |
| library/ | 69e8582b781c | golang.org/ | 0.44.0 | 1 |
| library/ | 6eb0add3b77c | golang.org/ | 0.44.0 | 1 |
| library/ | 7062a2109c4b | golang.org/ | 0.44.0 | 1 |
| library/ | 7c8f48705831 | golang.org/ | 0.44.0 | 1 |
| library/ | 7e5df973a748 | golang.org/ | 0.44.0 | 1 |
| library/ | 8775adb39f0d | golang.org/ | 0.44.0 | 1 |
| library/ | 8ff36f3c6637 | golang.org/ | 0.44.0 | 1 |
| library/ | 9a8afca54e78 | golang.org/ | 0.44.0 | 1 |
| library/ | a9abf4275f9e | golang.org/ | 0.44.0 | 1 |
| library/ | aadf2c0696f5 | golang.org/ | 0.44.0 | 1 |
| library/ | ced3ba927f4c | golang.org/ | 0.44.0 | 1 |
| library/ | e8db9bd3e9e1 | golang.org/ | 0.44.0 | 1 |
| library/ | eba8ddbdd837 | golang.org/ | 0.44.0 | 1 |
| library/ | ebba4f4de37f | golang.org/ | 0.44.0 | 1 |
| library/ | ef257d85f76e | golang.org/ | 0.44.0 | 1 |
| library/ | f02121de6f74 | golang.org/ | 0.44.0 | 1 |
| library/ | f565573d74ae | golang.org/ | 0.44.0 | 1 |
| library/ | fbcea1bd13b6 | golang.org/ | 0.44.0 | 1 |
| library/ | 091a7b5de688 | golang.org/ | 0.44.0 | 1 |
| library/ | 352c1fdadc91 | golang.org/ | 0.44.0 | 1 |
| library/ | 6a5130174e14 | golang.org/ | 0.44.0 | 1 |
| library/ | 6aaf3f5e6bc8 | golang.org/ | 0.44.0 | 1 |
| library/ | 77697a75da9f | golang.org/ | 0.44.0 | 1 |
| library/ | 83edc2b8e9ff | golang.org/ | 0.44.0 | 1 |
| library/ | 92b8b307ee28 | golang.org/ | 0.44.0 | 1 |
| library/ | bb142a9c18ac | golang.org/ | 0.44.0 | 1 |
| library/ | c1e88455c852 | golang.org/ | 0.44.0 | 1 |
| library/ | c9d92d840fd0 | golang.org/ | 0.44.0 | 1 |
| library/ | 04ac44a2595b | golang.org/ | 0.44.0 | 1 |
| library/ | 28e98eece020 | golang.org/ | 0.44.0 | 1 |
| library/ | 507a3eecf809 | golang.org/ | 0.44.0 | 1 |
| library/ | 794079a7f241 | golang.org/ | 0.44.0 | 1 |
| library/ | addb86c0c520 | golang.org/ | 0.44.0 | 1 |
| library/ | 0a5157f742d2 | golang.org/ | 0.44.0 | 1 |
| library/ | 104204dadedf | golang.org/ | 0.44.0 | 1 |
| library/ | 1489caffaedb | golang.org/ | 0.44.0 | 1 |
| library/ | 1957e3314f43 | golang.org/ | 0.44.0 | 1 |
| library/ | 2f603f8d3abe | golang.org/ | 0.44.0 | 1 |
| library/ | 34d5089d0b41 | golang.org/ | 0.44.0 | 1 |
| library/ | 5d47b7bb2546 | golang.org/ | 0.44.0 | 1 |