CVE-2026-45752
📛 CVE Title
(no title)
Description
The vulnerability exists due to a use-after-free condition that allows a remote attacker to potentially bypass security restrictions or cause instability.
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- critical
- CVSS score
- 9.8 / 10
- CVSS vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- Effective score
- 9.8 / 10 CRITICAL source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- —
- Last updated
- —
- Source
- https://www.tenable.com/cve/CVE-2026-45752
- Linked Threat
- CVE-2026-45752 — CVE-2026-45752
NVD / KEV / EPSS data refreshed 2026-06-29 07:49 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-75730 - Assigner
- GitHub_M
- Published
- Sep 10, 2026, 8:37:49 PM
- Updated
- Sep 10, 2026, 8:37:49 PM
- EUVD base score (CVSS 3.1)
-
5.9 / 10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - EUVD-reported EPSS
- 0.0000
- Vendors
- OISF
- Products
-
suricata (8.0.0, < 8.0.5)
ENISA description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after it had been reallocated and freed. The issue is reached during network traffic processing, but requires a malicious rule as Suricata will crash whatever the traffic. Version 8.0.5 contains a fix. As a workaround, avoid rules that chain `gunzip` or `zlib_deflate` with `max-size` bigger than 4096 after another transform.
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
Web references (2)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvd.nist.gov/vuln/detail/CVE-2026-45752 tenable:nvd.nist.gov
- https://www.cve.org/CVERecord?id=CVE-2026-45752 tenable:www.cve.org
Remediations (10)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:blogs.oracle.com
For more information about the Critical Security Patch Update program, see the security vulnerability remediation practices page located on the Oracle Trust Center.
2026-06-19 02:32 UTC -
web:patch.com
Peekskill-Cortlandt Latest Headlines: 8 'Urban Explorers' Arrested Trespassing At Abandoned IBM Complex: NYSP; Assisted Living Facility Worker Stole Residents' Credit Cards, Went On Spending Spree ...
2026-06-19 02:32 UTC -
web:support.apple.com
About the security content of iOS 26.2 and iPadOS 26.2 This document describes the security content of iOS 26.2 and iPadOS 26.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page. Apple ...
2026-06-19 02:32 UTC -
web:support.microsoft.com
Summary Improvements and fixes included in this update How to obtain and install the update More information File information Information about protection and security Summary This security update contains fixes and resolves vulnerabilities. To learn more about the vulnerabilities, see the following security advisories: CVE - 2026 -21262 - SQL Server Elevation of Privilege Vulnerability CVE-2026 ...
2026-06-19 02:32 UTC -
web:techcommunity.microsoft.com
UPDATE June 9, 2026 : Please see our release blog post for June 2026 Security Update for more information on this CVE : Released: June 2026 Exchange Server Security Updates | Microsoft Community Hub. On May 14, 2026 , Microsoft disclosed CVE - 2026 -42897, a reported vulnerability affecting Exchange Outlook Web Access (OWA). An attacker could exploit this issue by sending a specially crafted email ...
2026-06-19 02:32 UTC -
web:thehackernews.com
Microsoft released mitigations for YellowKey, a publicly disclosed BitLocker bypass tracked as CVE - 2026 -45585 with a CVSS score of 6.8.
2026-06-19 02:32 UTC -
web:www.golfthepatch.com
Now open, The Patch features a redesigned 18-hole course, led by golf course architects Tom Fazio and Beau Welling, and a new 9-hole short course, The Loop at The Patch , designed by Tiger Woods and TGR Design. Welcome to Augusta's best-in-class public golf experience.
2026-06-19 02:32 UTC -
web:www.malwarebytes.com
Microsoft says it's working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.
2026-06-19 02:32 UTC -
web:www.minimus.io
What is CVE remediation ? CVE remediation is the end-to-end process of finding a known vulnerability in software you run, deciding whether and how urgently to fix it, applying a patch or workaround, and verifying the fix held. A CVE (Common Vulnerabilities and Exposures) is a unique identifier issued by MITRE for a publicly disclosed software flaw.
2026-06-19 02:32 UTC -
web:www.oracle.com
Oracle Critical Patch Update Advisory - January 2026 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical ...
2026-06-19 02:32 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.