CVE-2026-92392

Опубликовано: 14 окт. 2026

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

During an upload, curl mishandles HTTP/2 RST_STREAM received from the server (with reason HTTP_1_1_REQUIRED or REFUSED_STREAM) leading to a use after free of a struct Curl_easy object.

Ссылки

EPSS

Процентиль: 70%

0.01284

Низкий

8.1 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-92392

CVSS3: 8.1

ubuntu

26 дней назад

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

CVE-2026-92392

CVSS3: 8.1

redhat

26 дней назад

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

CVE-2026-92392

CVSS3: 8.1

msrc

23 дня назад

HTTP/2 upload Use-After-Free

CVE-2026-92392

CVSS3: 8.1

debian

26 дней назад

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from th ...

GHSA-7jvw-75gf-2h34

CVSS3: 8.1

github

26 дней назад

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

EPSS

Процентиль: 70%

0.01284

Низкий

8.1 High

CVSS3

Дефекты

CWE-416