Go toolchain cmd/compile

2 known vulnerabilities in Go toolchain cmd/compile, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-27144 CVSS 7.1 high The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from…
  • CVE-2026-27143 CVSS 9.8 critical Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow…