Lucene search
+L

9 matches found

OSV
OSV
added 2026/09/21 6:37 a.m.7 views

ROOT-OS-DEBIAN-13-CVE-2026-18924 CVE-2026-18924 in curl - Patched by Root

Root has patched CVE-2026-18924 in the curl package for Root:Debian:13. Multiple fixed versions available...

5.6AI score0.00897EPSS
SaveExploits1
OSV
OSV
added 2026/09/06 6:17 p.m.8 views

DEBIAN-CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS6.2AI score0.00897EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/06 6:17 p.m.5 views

AZL-99879 CVE-2026-18924 affecting package tensorflow 2.16.1-11

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

5.7AI score0.00897EPSS
SaveExploits1References1
OSV
OSV
added 2026/09/06 6:17 p.m.25 views

UBUNTU-CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS6.2AI score0.00897EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2026/09/06 6:17 p.m.13 views

CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS5.7AI score0.00897EPSS
SaveExploits1References3
OSV
OSV
added 2026/09/04 6:05 a.m.6 views

BELL-CVE-2026-18924

Bulletin has no description...

9.1CVSS5.6AI score0.00897EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.15 views

libcurl 7.44.0 < 8.22.0 HTTP/2 Server Push Use-After-Free

The version of libcurl installed on the remote host is 7.44.0 prior to 8.22.0. It is, therefore, affected by a use-after-free vulnerability: - A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to...

6.3AI score0.00897EPSS
SaveExploits1References3
Circl
Circl
added 2026/09/02 12:35 p.m.21 views

CVE-2026-18924

creationtimestamp| type| source ---|---|--- 2026-09-02 12:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k 2026-09-08 16:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzfvusbze2b 2026-09-08 20:03:22+00:00| seen|...

9.1CVSS5.7AI score0.00897EPSS
SaveExploits1References3
Hacker One
Hacker One
added 2026/08/04 3:44 p.m.13 views

curl: CVE-2026-18924: HTTP/2 server push UAF

A vulnerability was discovered in libcurl versions 8.21.0 and later, where a use-after-free issue could occur in the HTTP/2 server push functionality. The vulnerability was caused by the fact that when a pushed transfer ends, the connection's pool is not properly handled, leading to the freed...

5.8AI score0.00897EPSS
SaveExploits1
Rows per page
Query Builder