CVE-2026-78437 · Brief

CVEs like CVE-2026-78437

The records whose text reads closest to CVE-2026-78437, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2025-316500.805
   Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

   Same weakness class, CWE-459; same vendor or product family, Apache.

2. CVE-2024-245490.785
   Apache Tomcat: HTTP/2 header handling DoS

   Same vendor or product family, Apache.

3. CVE-2024-347500.771
   Apache Tomcat: HTTP/2 excess header handling DoS

   Same vendor or product family, Apache.

4. CVE-2026-687630.765
   Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset

   Same vendor or product family, Apache.

5. CVE-2025-535060.763
   Apache Tomcat: DoS via excessive h2 streams at connection start

   Same vendor or product family, Apache.

6. CVE-2019-100720.746
   The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache…

   Same vendor or product family, Apache.

7. CVE-2019-01990.726
   The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive…

   Same vendor or product family, Apache.

8. CVE-2026-880410.752
   Apache Tomcat: HTTP/2 trailer header cross-contamination

   Same weakness class, CWE-459; same vendor or product family, Apache.

9. CVE-2026-412930.744
   Apache Tomcat: HTTP/2 request headers not validated

   Same vendor or product family, Apache.

10. CVE-2012-55680.700
    Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP…

    Same vendor or product family, Apache.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.