tag
Http2
High
Windows HTTP.sys Header-Count-Triggered Kernel Memory Corruption / BSOD (CVE-2026-49160)
CVE-2026-49160·
Windows HTTP.sys kernel-mode driver (Windows 10 build 26100 confirmed in crash logs)
patched
High
NGINX HTTP/2 Frame Injection via Vulnerable Upstream Proxying (CVE-2026-42926)
CVE-2026-42926·
NGINX (HTTP/2 upstream proxying)
patched
High
gRPC-Go RBAC Authorization Bypass via Missing Leading Slash in `:path` (CVE-2026-33186)
CVE-2026-33186 (GHSA-p77j-4mvh-x3m3)·
google.golang.org/grpc (grpc-go) authz package (SDK-level RBAC)
patched
High
Apache HTTP Server HTTP/2 HPACK Cookie-Merging Memory Bomb (CVE-2026-49975)
CVE-2026-49975·
Apache HTTP Server (mod_http2)
unpatched