CVE-2026-94636 · Brief

CVEs like CVE-2026-94636

The records whose text reads closest to CVE-2026-94636, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-485860.909
   Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression…

   Same weakness class, CWE-409; same vendor or product family, Apache.

2. CVE-2026-854830.683
   Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end

   Same vendor or product family, Apache.

3. CVE-2026-416080.889
   Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

   Same weakness class, CWE-409; same vendor or product family, Apache.

4. CVE-2026-88140.701
   Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data…

   Same weakness class, CWE-409.

5. CVE-2026-660540.801
   Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize

   Same vendor or product family, Apache.

6. CVE-2026-854940.756
   Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift…

   Same vendor or product family, Apache.

7. CVE-2026-663310.730
   Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize

   Same vendor or product family, Apache.

8. CVE-2026-660550.714
   Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a…

   Same vendor or product family, Apache.

9. CVE-2026-946370.852
   Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame

   Same weakness class, CWE-409; same vendor or product family, Apache.

10. CVE-2026-491580.847
    Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb

    Same weakness class, CWE-409; same vendor or product family, Apache.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.