Lucene search
+L

59 matches found

osv_azl
osv_azl
•added 2026/09/06 6:17 p.m.•21 views

AZL-99780 CVE-2026-18924 affecting package cmake 3.30.3-15

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2026/09/06 6:17 p.m.•20 views

AZL-99764 CVE-2026-18924 affecting package curl 8.11.1-11

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2026/09/06 6:17 p.m.•16 views

AZL-99858 CVE-2026-18924 affecting package rust 1.90.0-10

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2026/09/06 6:17 p.m.•15 views

AZL-99801 CVE-2026-18924 affecting package mysql 8.0.46-1

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2026/09/06 6:17 p.m.•17 views

AZL-99834 CVE-2026-18924 affecting package rust 1.75.0-30

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2026/09/06 6:17 p.m.•20 views

ALPINE-CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/06 6:17 p.m.•15 views

CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS0.00584EPSS
SaveExploits1References3
osv_azl
osv_azl
•added 2026/09/06 6:17 p.m.•23 views

AZL-99879 CVE-2026-18924 affecting package tensorflow 2.16.1-11

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/09/06 5:47 p.m.•178 views

CVE-2026-18924 HTTP/2 server push UAF

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

0.00584EPSS
SaveExploits1References3
CVE
CVE
•added 2026/09/06 5:47 p.m.•212 views

CVE-2026-18924

A use-after-free vulnerability exists in libcurl due to a flaw in how it handles HTTP/2 Server Push streams. This issue occurs when a parent handle is configured to share connections with other handles, leading to a memory corruption flaw during the cleanup process. A remote attacker could potent...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2026/09/06 5:47 p.m.•45 views

CVE-2026-18924 HTTP/2 server push UAF

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/09/06 5:47 p.m.•23 views

EUVD-2026-72165

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

7.1AI score0.00584EPSS
SaveExploits1References3
Mend
Mend
•added 2026/09/06 5:47 p.m.•7 views

CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2026/09/06 5:47 p.m.•18 views

CVE-2026-18924 HTTP/2 server push UAF

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

7.1AI score0.00584EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/09/06 5:47 p.m.•25 views

CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.4AI score0.00584EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2026/09/06 5:47 p.m.•23 views

CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/06 12:00 a.m.•6 views

CVE-2026-18924: Use After Free

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.2AI score0.00584EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2026/09/03 12:06 p.m.•12 views

curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

A flaw was found in libcurl. When libcurl handles HTTP/2 Server Push streams and the parent handle shares connections, a use-after-free vulnerability can occur during the cleanup process. This could lead to application crashes, resulting in a denial of service...

9.1CVSS7.2AI score0.00584EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2026/09/03 12:00 a.m.•31 views

libcurl 7.44.0 < 8.22.0 HTTP/2 Server Push Use-After-Free

The version of libcurl installed on the remote host is 7.44.0 prior to 8.22.0. It is, therefore, affected by a use-after-free vulnerability: - A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to...

9.1CVSS7.5AI score0.00584EPSS
SaveExploits1References3
curl security advisories
curl security advisories
•added 2026/09/02 8:00 a.m.•26 views

HTTP/2 server push UAF

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

9.1CVSS7.1AI score0.00584EPSS
SaveExploits1References1Affected Software2
Rows per page
Query Builder