CVE Watch27 ago 2026

CVE-2026-47857

In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (

CVSS

5.9

Medio

EPSS

0.2%

p13

KEV

—

Exploit Today

0-100

Publicado: 27 ago 2026 · Última mod.: 27 ago 2026 · CWE-190

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and earlier

Referencias oficiales

spring.iohttps://spring.io/security/cve-2026-47857

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-19313—

—

——0An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.16h CVE-2025-702909.8 CRÍ

6.5%

——2An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or arbitrary code execution during the boot process.22h CVE-2026-792928.3 ALT

33.8%

——10Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)2d CVE-2026-792238.8 ALT

10.6%

——3Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Chromium security severity: Low)2d CVE-2026-792158.8 ALT

25.4%

——8Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)2d CVE-2026-789508.8 ALT

44.2%

——13Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)2d