Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-18924

Опубликовано: 06 сент. 2026
Источник: nvd
CVSS3: 9.1
EPSS Низкий

Описание

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
Версия от 7.44.0 (включая) до 8.22.0 (исключая)

EPSS

Процентиль: 58%
0.00897
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-416
CWE-416

Связанные уязвимости

CVSS3: 9.1
ubuntu
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

CVSS3: 3.7
redhat
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

msrc
12 дней назад

HTTP/2 server push UAF

CVSS3: 9.1
debian
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

CVSS3: 9.1
github
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

EPSS

Процентиль: 58%
0.00897
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-416
CWE-416