CVE-2026-18924 - HTTP/2 server push UAF
Brief
CVE ID : CVE-2026-18924
Published : Sept. 6, 2026, 6:17 p. m.
- 2 hours, 31 minutes ago
Description : A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.
Severity: 0.0
- NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...