CVE-2026-73507 · Brief

CVEs like CVE-2026-73507

The records whose text reads closest to CVE-2026-73507, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2018-108640.670
   An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded.

   Same weakness class, CWE-400 (uncontrolled resource consumption).

2. CVE-2023-524250.674
   libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in…

   Same weakness class, CWE-400 (uncontrolled resource consumption).

3. CVE-2016-49700.708
   handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers…

   Same vendor or product family, netty.

4. CVE-2021-438590.668
   Denial of Service by injecting highly recursive collections or maps in XStream

   Same weakness class, CWE-400 (uncontrolled resource consumption).

5. CVE-2014-01930.727
   WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and…

   Same vendor or product family, netty.

6. CVE-2012-08760.671
   The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash…

   Same weakness class, CWE-400 (uncontrolled resource consumption).

7. CVE-2021-213410.689
   XStream can cause a Denial of Service

   Same weakness class, CWE-400 (uncontrolled resource consumption).

8. CVE-2016-95960.681
   libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause…

   Same weakness class, CWE-400 (uncontrolled resource consumption).

9. CVE-2022-418810.692
   Netty project is an event-driven asynchronous network application framework.

   Same vendor or product family, netty.

10. CVE-2013-21600.680
    The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-02.