Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-18924

Опубликовано: 09 сент. 2026
Источник: msrc
CVSS3: 5.9
EPSS Низкий

Описание

HTTP/2 server push UAF

Обновления

ПродуктСтатьяОбновление
azl3 curl 8.11.1-11 on Azure Linux 3.0

Показывать по

EPSS

Процентиль: 58%
0.00897
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.1
ubuntu
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

CVSS3: 3.7
redhat
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

CVSS3: 9.1
nvd
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

CVSS3: 9.1
debian
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

CVSS3: 9.1
github
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

EPSS

Процентиль: 58%
0.00897
Низкий

5.9 Medium

CVSS3