What is the CVSS score of CVE-2026-33850?

CVE-2026-33850 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dualsensey V2 are affected by CVE-2026-33850?

A high-severity vulnerability in WujekFoliarz DualSenseY-v2 (versions <54) allows local attackers to execute arbitrary code through malicious files or inputs.. A patch is available.

How to fix or mitigate CVE-2026-33850?

Within 24 hours: Identify all systems running DualSenseY-v2 versions prior to v54 and assess exposure within your environment. Within 7 days: Communicate patch availability to affected users and establish a patching schedule; prioritize systems used by administrative or sensitive-access personnel. Within 30 days: Verify deployment of version 54 or later across all affected systems and validate through inventory or endpoint management tools.

Dualsensey V2 CVE-2026-33850

Q: How to fix or mitigate CVE-2026-33850?

Within 24 hours: Identify all systems running DualSenseY-v2 versions prior to v54 and assess exposure within your environment. Within 7 days: Communicate patch availability to affected users and establish a patching schedule; prioritize systems used by administrative or sensitive-access personnel. Within 30 days: Verify deployment of version 54 or later across all affected systems and validate through inventory or endpoint management tools.

EUVD-2026-14752 HIGH

Out-of-bounds Write (CWE-787)

2026-03-24 GovTech CSG

GHSA-2cjm-f4h6-vv39

Buffer Overflow Memory Corruption Dualsensey V2

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 24, 2026 - 06:15 euvd

EUVD-2026-14752

Analysis Generated

Mar 24, 2026 - 06:15 vuln.today

Patch released

Mar 24, 2026 - 06:15 nvd

Patch available

CVE Published

Mar 24, 2026 - 05:47 nvd

HIGH 7.8

DescriptionCVE.org

Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54.

AnalysisAI

WujekFoliarz DualSenseY-v2 versions prior to 54 contain an out-of-bounds write vulnerability that allows local attackers with user interaction to achieve arbitrary code execution with full system compromise. The CVSS 7.8 rating reflects the high impact on confidentiality, integrity, and availability through memory corruption exploitation. A patch is available for affected users to mitigate this local privilege escalation risk.

Technical ContextAI

DualSenseY-v2 (cpe:2.3:a:wujekfoliarz:dualsensey-v2) is a Windows application that enables DualSense PlayStation 5 controller functionality on PC. The vulnerability is classified as CWE-787 (Out-of-bounds Write), a memory corruption issue where the application writes data outside the bounds of allocated memory buffers. This type of buffer overflow can occur during parsing of controller input data or configuration files, allowing attackers to overwrite adjacent memory regions and potentially hijack program execution flow to run arbitrary code.

RemediationAI

Upgrade DualSenseY-v2 to version 54 or later to address this vulnerability. The patch is available through GitHub pull request #66 at https://github.com/WujekFoliarz/DualSenseY-v2/pull/66. Users should download the latest release from the official repository and replace their existing installation. As an interim mitigation until patching is completed, users should avoid opening untrusted configuration files or connecting to untrusted systems while running the application, and should only download DualSenseY-v2 files from the official GitHub repository to prevent exploitation through malicious file parsing.