GCVE-110-NCSC-2026-445

Advisory PublishedCVSS 8.3/10

Vulnetix · Advisory published October 21, 2026

Multiple vulnerabilities including use-after-free in DANE TLSA client code, NULL pointer dereferences, heap buffer overflow, TLS 1.3 key agreement flaws, and critical network and HTTPS exploits affect OpenSSL and Oracle products, potentially leading to crashes, data corruption, unauthorized access, or full system takeover.

Download JSON Open in Console

Weaknesses (CWE)

CWE-416Use After FreeCWE-754Improper Check for Unusual or Exceptional ConditionsCWE-354Improper Validation of Integrity Check Value

Risk Scores

CVSS 3.1

8.3/10

High · CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2026-101531 CVE-2026-28387 CVE-2026-31790 CVE-2026-75803 CVE-2026-87263 CVE-2026-91241 CVE-2026-91534 CVE-2026-91535 CVE-2026-91539 CVE-2026-91545 CVE-2026-91546 CVE-2026-91549 CVE-2026-91557 CVE-2026-91579 CVE-2026-91597 CVE-2026-91608

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON