Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 06:58:21 +0000 CVE-2026-8201 — Use-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted Fields https://vulnerability.circl.lu/vuln/cve-2026-8201 <p><strong>Affected:</strong> MongoDB, Inc. MongoDB Server</p> <p>A use-after-free vulnerability exists in MongoDB&#39;s Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a client&#39;s FLE-related query.</p> <p>This issue impacts MongoDB Server’s mongocryptd component v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.</p> <p><strong>Affected:</strong> MongoDB, Inc. MongoDB Server</p> <p>A use-after-free vulnerability exists in MongoDB&#39;s Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a client&#39;s FLE-related query.</p> <p>This issue impacts MongoDB Server’s mongocryptd component v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.</p> https://vulnerability.circl.lu/vuln/cve-2026-8201