CVE WatchJul 1, 2026

CVE-2026-44628

An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage

CVSS

7.5

High

EPSS

0.4%

p32

KEV

—

Exploit Today

0-100

Published: Jun 30, 2026 · Last modified: Jul 1, 2026 · CWE-843

EPSS · 30d

0.4%EPSS · 30 days0.4%

2026-07-012026-07-21

Technical description

An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage directory, the expected lockfile, and at least one matching worklist record.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-646089.8 CRI

—

——0Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and out-of-bounds memory access. Only the C++ implementation is affected; other language implementations of Apache Fory are not. This issue affects Apache Fory C++: from 0.14.0 before 1.4.0. Users are recommended to upgrade to version 1.4.0, which fixes the issue.3h CVE-2026-157768.8 HIG

25.0%

——8Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)6d CVE-2026-585417.8 HIG

21.0%

——6Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally.5d CVE-2026-571087.5 HIG

61.3%

——18Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.1d CVE-2026-550257.8 HIG

22.4%

——7Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.6d CVE-2026-550247.8 HIG

31.6%

——9Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.6d