{"metadata": {"vulnerability": "CVE-2026-95691", "count": 19, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 12}, "linked_omitted": 0}, "data": [{"timestamp": "2026-09-22T14:18:48.635Z", "date_only": false, "value": "2026-09-22T14:18:48.635Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-95691", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4443", "record": "WID-SEC-W-2026-4443", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4443", "record": "WID-SEC-W-2026-4443", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4443", "record": "WID-SEC-W-2026-4443", "field": "vulnerabilities.3.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4443", "record": "WID-SEC-W-2026-4443", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1496", "record": "CERTFR-2026-AVI-1496", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": true, "value": "2026-11-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1496", "record": "CERTFR-2026-AVI-1496", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1496", "record": "CERTFR-2026-AVI-1496", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-10T11:00:00Z", "date_only": false, "value": "2026-11-10T11:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / openssl", "record": "CVE-2026-95691", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T13:12:32.287Z", "date_only": false, "value": "2026-11-10T13:12:32.287+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4443", "record": "WID-SEC-W-2026-4443", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-10T18:16:03.752Z", "date_only": false, "value": "2026-11-10T18:16:03.752Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-95691", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T18:16:03.752Z", "date_only": false, "value": "2026-11-10T18:16:03.752Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-95691", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-10T18:16:03.752Z", "date_only": false, "value": "2026-11-10T18:16:03.752Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / openssl", "record": "CVE-2026-95691", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T19:21:39Z", "date_only": false, "value": "2026-11-10T19:21:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q8C3-JQ6J-FC5F", "record": "GHSA-Q8C3-JQ6J-FC5F", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-10T19:21:39.377Z", "date_only": false, "value": "2026-11-10T19:21:39.377", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-95691", "record": "FKIE_CVE-2026-95691", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T21:34:03Z", "date_only": false, "value": "2026-11-10T21:34:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q8C3-JQ6J-FC5F", "record": "GHSA-Q8C3-JQ6J-FC5F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T21:34:03Z", "date_only": false, "value": "2026-11-10T21:34:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q8C3-JQ6J-FC5F", "record": "GHSA-Q8C3-JQ6J-FC5F", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-10T22:10:04.727Z", "date_only": false, "value": "2026-11-10T22:10:04.727", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-95691", "record": "FKIE_CVE-2026-95691", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-11T01:35:07.494Z", "date_only": false, "value": "2026-11-11T01:35:07.494367Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117595236399601537", "record": "CVE-2026-95691", "field": "creation_timestamp", "uuid": "fc81852e-fb58-4a8d-8793-d6aa7c2a5283", "content": "CVE-2026-95691 Retransmitted QUIC CRYPTO Frames Can Cause DoS or One-byte Disclosure Issue summary: A retransmitted QUIC CRYPTO frame can release packet storagewhile the TLS record layer retains a direct pointer into that storage causinguse after free.\nImpact summary: A malicious QUIC server can cause a heap-use-after-free readin the OpenSSL QUIC client. The server can also identify one allocator-adjacentbyte through the client's protected Handshake response.\nCWE: CWE-416: Use After Free\nDescription: During CRYPTO stream processing, a pointer into the first frame'smemory on the stream is lent to the TLS handshake processing. The memorymust remain stable until it is processed and released. However the processingof retransmitted CRYPTO frames could release the memory if the retransmittedframe fully overlapped the existing frame. This then causes use-after-free readwhen the TLS handshake processing continues.\nThe use-after-free read can lead to a Denial-of-Service of the clientapplication or a minor leak of information about the heap memory contentsthat might be overwritten with other data, subsequently allocated bythe application, to the peer.\nFIPS impact: noThe FIPS module is not affected as the QUIC implementation is outside ofthe OpenSSL FIPS module boundary.\nhttps://www.cve.org/CVERecord?id=CVE-2026-95691https://openssl-library.org/news/secadv/20261110.txthttps://github.com/openssl/openssl/commit/dd90ceb99a3c2ddba336bb4a00be9ebabd84c2a1https://github.com/openssl/openssl/commit/ec9d4de9d03989b29db5a3d7efdb4c285deaf386https://github.com/openssl/openssl/commit/f6244675833e097c2429a40d1b206d95385bd42f#OpenSSL#CVE_2026_95691#bot", "url": "https://infosec.exchange/users/cve/statuses/117595236399601537"}], "metrics": {"as_of": "2026-11-11T03:41:13.609Z", "anchors": {"origin": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4443", "record": "WID-SEC-W-2026-4443", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4443", "record": "WID-SEC-W-2026-4443", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 103273.609466, "hours": 28.687113740555553, "days": 1.1952964058564814, "min_seconds": 103273.609466, "max_seconds": 103273.609466, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-09T23:00:00Z", "date_only": false, "value": "2026-11-09T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4443", "record": "WID-SEC-W-2026-4443", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-11T03:41:13.609Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}