CVE-2026-18772

Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion...

CVE-2026-18772: Improperly Controlled Sequential Memory Allocation

Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion...

CVE-2026-63263

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197. An authenticated user may submit a specially crafted query to the ES|QL engine that causes exponential CPU consumption during query evaluation. Because the resource...

CVE-2026-63263: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197. An authenticated user may submit a specially crafted query to the ES|QL engine that causes exponential CPU consumption during query evaluation. Because the resource...

Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-74)

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197. An authenticated user may submit a specially crafted query to the ES|QL engine that...

PT-2026-63269

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Resource Consumption in the ES|QL engine can lead to a denial of service through Exponential Data Expansion, a technique where a small input causes a disproportionately lar...