Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-82063

Опубликовано: 08 сент. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 7.0.0 (включая) до 7.0.41 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.0.0 (включая) до 8.0.30 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.3.0 (включая) до 8.3.9 (исключая)

EPSS

Процентиль: 31%
0.00367
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 месяца назад

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.

CVSS3: 5.3
debian
2 месяца назад

A use-after-free security issue in the cursor management component of ...

CVSS3: 5.3
redos
8 дней назад

Уязвимость mongodb-org

CVSS3: 5.3
redos
8 дней назад

Уязвимость mongodb-org

CVSS3: 5.3
github
2 месяца назад

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.

EPSS

Процентиль: 31%
0.00367
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-416