CVE-2024-26800: tls: fix use-after-free on failed backlog decryption

Overview

Severity
High (CVSS 7.8)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploit Status
Not Exploited
Patch Tuesday
2024-Apr
Released
2025-12-12
Last Updated
2026-03-31
EPSS Score
0.02% (percentile: 6.3%)

Affected Products (3)

Other

  • 20925-17086
  • 21093-17086
  • 17087-17086

Revision History

  • 2025-12-12: Information published.
  • 2026-03-03: Information published.
  • 2026-03-31: Information published.