Search: CVE-2026-18924

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.6%	CVE-2026-18924curl Critical9.1EPSS 0.6%2026-09-06GCVE DatabaseCVE-2026-18924 A use-after-free vulnerability exists in libcurl's handling of HTTP/2 Server Push streams when the parent handle shares connections with other handles. This flaw can lead to curl crashing or potentially allow remote code execution. The issue affects multiple Ubuntu package versions of curl and has a high CVSS score of 9.1. Official patches are available in updated Ubuntu package versions. EPSS 0.6%Vulnerability	GCVE Database	2026-09-06

Page 1 of 1