CVE-2026-93926 · Brief

CVEs like CVE-2026-93926

The records whose text reads closest to CVE-2026-93926, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-559710.805
   Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()

   Same vendor or product family, Apache.

2. CVE-2026-911350.780
   Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)

   Same vendor or product family, Apache.

3. CVE-2026-946370.744
   Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame

   Same vendor or product family, Apache.

4. CVE-2026-660540.763
   Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize

   Same vendor or product family, Apache.

5. CVE-2026-416080.756
   Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

   Same vendor or product family, Apache.

6. CVE-2026-559700.713
   Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()

   Same vendor or product family, Apache.

7. CVE-2026-939250.724
   Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id

   Same vendor or product family, Apache.

8. CVE-2026-586620.730
   Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass

   Same vendor or product family, Apache.

9. CVE-2026-491580.742
   Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb

   Same vendor or product family, Apache.

10. CVE-2026-824590.728
    Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit…

    Same vendor or product family, Apache.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.