libcurl HTTP/2 Server Push Use-After-Free via Connection Sharing
CVE-2026-18924 Published on September 6, 2026
HTTP/2 server push UAF
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent
handle is set to share connections with other handles, can lead to
use-after-free in the cleanup process.
Vulnerability Analysis
CVE-2026-18924 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. An automatable proof of concept (POC) exploit exists. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity and availability.
Weakness Type
What is a Dangling pointer Vulnerability?
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
CVE-2026-18924 has been classified to as a Dangling pointer vulnerability or weakness.
Products Associated with CVE-2026-18924
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-18924 are published in these products:
Affected Versions
curl:- Version 7.44.0 and below 8.14.2 is affected.
- Version 8.15.0 and below 8.16.1 is affected.
- Version 8.17.0 and below 8.20.1 is affected.
- Version 8.21.0 and below 8.22.0 is affected.
- Version ea7134ac874a66107e54ff93657ac565cf2ec4aa and below 90325ff0444cbdff368bda5d26d6405a0bb6ee43 is affected.
- Version 8.21.0 is affected.
- Version 8.20.0 is affected.
- Version 8.19.0 is affected.
- Version 8.18.0 is affected.
- Version 8.17.0 is affected.
- Version 8.16.0 is affected.
- Version 8.15.0 is affected.
- Version 8.14.1 is affected.
- Version 8.14.0 is affected.
- Version 8.13.0 is affected.
- Version 8.12.1 is affected.
- Version 8.12.0 is affected.
- Version 8.11.1 is affected.
- Version 8.11.0 is affected.
- Version 8.10.1 is affected.
- Version 8.10.0 is affected.
- Version 8.9.1 is affected.
- Version 8.9.0 is affected.
- Version 8.8.0 is affected.
- Version 8.7.1 is affected.
- Version 8.7.0 is affected.
- Version 8.6.0 is affected.
- Version 8.5.0 is affected.
- Version 8.4.0 is affected.
- Version 8.3.0 is affected.
- Version 8.2.1 is affected.
- Version 8.2.0 is affected.
- Version 8.1.2 is affected.
- Version 8.1.1 is affected.
- Version 8.1.0 is affected.
- Version 8.0.1 is affected.
- Version 8.0.0 is affected.
- Version 7.88.1 is affected.
- Version 7.88.0 is affected.
- Version 7.87.0 is affected.
- Version 7.86.0 is affected.
- Version 7.85.0 is affected.
- Version 7.84.0 is affected.
- Version 7.83.1 is affected.
- Version 7.83.0 is affected.
- Version 7.82.0 is affected.
- Version 7.81.0 is affected.
- Version 7.80.0 is affected.
- Version 7.79.1 is affected.
- Version 7.79.0 is affected.
- Version 7.78.0 is affected.
- Version 7.77.0 is affected.
- Version 7.76.1 is affected.
- Version 7.76.0 is affected.
- Version 7.75.0 is affected.
- Version 7.74.0 is affected.
- Version 7.73.0 is affected.
- Version 7.72.0 is affected.
- Version 7.71.1 is affected.
- Version 7.71.0 is affected.
- Version 7.70.0 is affected.
- Version 7.69.1 is affected.
- Version 7.69.0 is affected.
- Version 7.68.0 is affected.
- Version 7.67.0 is affected.
- Version 7.66.0 is affected.
- Version 7.65.3 is affected.
- Version 7.65.2 is affected.
- Version 7.65.1 is affected.
- Version 7.65.0 is affected.
- Version 7.64.1 is affected.
- Version 7.64.0 is affected.
- Version 7.63.0 is affected.
- Version 7.62.0 is affected.
- Version 7.61.1 is affected.
- Version 7.61.0 is affected.
- Version 7.60.0 is affected.
- Version 7.59.0 is affected.
- Version 7.58.0 is affected.
- Version 7.57.0 is affected.
- Version 7.56.1 is affected.
- Version 7.56.0 is affected.
- Version 7.55.1 is affected.
- Version 7.55.0 is affected.
- Version 7.54.1 is affected.
- Version 7.54.0 is affected.
- Version 7.53.1 is affected.
- Version 7.53.0 is affected.
- Version 7.52.1 is affected.
- Version 7.52.0 is affected.
- Version 7.51.0 is affected.
- Version 7.50.3 is affected.
- Version 7.50.2 is affected.
- Version 7.50.1 is affected.
- Version 7.50.0 is affected.
- Version 7.49.1 is affected.
- Version 7.49.0 is affected.
- Version 7.48.0 is affected.
- Version 7.47.1 is affected.
- Version 7.47.0 is affected.
- Version 7.46.0 is affected.
- Version 7.45.0 is affected.
- Version 7.44.0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.