CVEs classified under CWE-675, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2026-78663 — CVSS 9.1 (critical): The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for…
CVE-2026-68179 — CVSS 8.4 (high): In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error paths nsm_dev_ioctl()…
CVE-2026-77860 — CVSS 3.7 (low): In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on…