Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-91096 is a use-after-free vulnerability in Facebook's proxygen library affecting versions from 2024.10.28.00 up to but not including 2026.09.28.00. The issue arises because the WebTransportImpl component fails to unregister read callbacks for streams that are no longer open before destroying them, potentially allowing the transport to invoke a freed read callback. This vulnerability has a high severity rating with a CVSS score of 7.5, indicating a significant impact on confidentiality without affecting integrity or availability. Join the discussion | CVE Database V5 | 09/28/2026, 20:44:57 UTC Added: 09/28/2026, 20:48:18 UTC |
CVE-2026-91095 is a use-after-free vulnerability in Facebook's proxygen library affecting versions from 2024.10.28.00 up to but not including 2026.09.28.00. The issue arises when certain HTTPTransaction APIs return stream handles that have already been freed, leading to potential use of freed memory. This flaw could cause application instability or crashes but does not impact confidentiality or integrity. Join the discussion | CVE Database V5 | 09/28/2026, 20:44:45 UTC Added: 09/28/2026, 20:48:18 UTC |
CVE-2026-84895 is a use-after-free vulnerability in Facebook's proxygen library affecting versions from 2026.04.06.00 up to but not including 2026.09.28.00. The issue occurs when QuicWtSession::closeSession accesses member fields after the base class method QuicWtSessionBase::closeSession potentially destroys the session object. This can lead to memory corruption and impacts confidentiality, integrity, and availability. Join the discussion | CVE Database V5 | 09/28/2026, 20:44:34 UTC Added: 09/28/2026, 20:48:18 UTC |
0 CVE-2026-44909 is a denial-of-service (DoS) vulnerability in Facebook's proxygen HTTP/2 server implementation. It arises when the server buffers response data under stalled flow-control conditions, such as when the client sets SETTINGS_INITIAL_WINDOW_SIZE to 0, causing memory exhaustion. An unauthenticated remote attacker can exploit this by opening many simultaneous streams and stalling outbound data, leading to excessive memory use and service disruption. Join the discussion | CVE Database V5 | 07/23/2026, 16:27:01 UTC Added: 07/23/2026, 16:53:18 UTC |
Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which blocks the backing event loop and unconditionally appends data to a std::vector per-loop iteration. This issue leads to unbounded memory growth and eventually causes the process to run out of memory. Join the discussion | CVE Database V5 | 12/02/2025, 22:13:31 UTC Added: 12/02/2025, 22:15:46 UTC |
Showing 1 to 5 of 5 results