CVE-2026-84304: gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
Overview
- Severity
- Medium (CVSS 4.4)
- CVSS Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- Exploit Status
- Not Exploited
- Patch Tuesday
- 2026-Sep
- Released
- 2026-09-05
- Last Updated
- 2026-10-10
- EPSS Score
- 0.61% (percentile: 48.4%)
Affected Products (54)
Other
- 21742-17084
- 21745-17084
- 21648-17084
- 21797-17084
- 21666-17084
- 21747-17084
- 21675-17084
- 21828-17084
- 21858-17084
- 21911-17084
- 21904-17084
- 21893-17084
- 21794-17084
- 21795-17084
- 21688-17084
- 21744-17084
- 21769-17084
- 21647-17084
- 21687-17084
- 21770-17084
- 21743-17084
- 21682-17084
- 21771-17084
- 21668-17084
- 21656-17084
- 21655-17084
- 21674-17084
- 21741-17084
- 21746-17084
- 21652-17084
- 21705-17084
- 21691-17084
- 21798-17084
- 21799-17084
- 21693-17084
- 21853-17084
- 21854-17084
- 21830-17084
- 21825-17084
- 21813-17084
- 21842-17084
- 21831-17084
- 21832-17084
- 21835-17084
- 21807-17084
- 21814-17084
- 21836-17084
- 21908-17084
- 21909-17084
- 21910-17084
- ... and 4 more
Security Updates (1)
Revision History
- 2026-09-05: Information published.
- 2026-09-06: Information published.
- 2026-09-07: Information published.
- 2026-09-09: Information published.
- 2026-09-09: Information published.
- 2026-09-15: Information published.
- 2026-09-18: Information published.
- 2026-09-19: Information published.
- 2026-09-19: Information published.
- 2026-09-20: Information published.
- 2026-09-23: Information published.
- 2026-09-24: Information published.
- 2026-09-24: Information published.
- 2026-10-05: Information published.
- 2026-10-07: Information published.
- 2026-10-07: Information published.
- 2026-10-08: Information published.
- 2026-10-10: Information published.