CVE-2026-101338
Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR
CVSS score
8.7
EPSS probability
%0.3
Risk score
0.0
Published
5 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and
Similar Vulnerabilities
9.1
CVE-2026-33278Possible arbitrary code execution during DNSSEC validation
Patch verifiedEPSS %1
9.1
CVE-2026-81642Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
Patch verified Public Exploits:1EPSS %1
8.7
CVE-2026-42944Heap overflow with multiple NSID, COOKIE, PADDING EDNS options
Patch verifiedEPSS %1
8.4
CVE-2026-82717CNAME synthesis could lead to heap corruption
Patch verifiedEPSS %1
8.7
CVE-2026-42959Crash during DNSSEC validation of malicious content
Patch verifiedEPSS %1
6.6
CVE-2026-41292Long list of incoming EDNS options degrades performance
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-101338"