GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-63828 (GCVE-0-2026-63828)

Vulnerability from cvelistv5 – Published: 2026-07-19 12:02 – Updated: 2026-08-17 04:51
VLAI
Title
apparmor: mediate the implicit connect of TCP fast open sendmsg
Summary
In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit connect of TCP fast open sendmsg sendmsg()/sendto() with MSG_FASTOPEN is a combination of connect(2) and write(2): it opens the connection in the SYN. apparmor_socket_sendmsg() only checks AA_MAY_SEND, so a profile that grants send but denies connect lets a confined task open an outbound TCP/MPTCP connection that connect(2) would have refused, bypassing connect mediation. Mediate the implicit connect when MSG_FASTOPEN is set and a destination is supplied. Add it to apparmor_socket_sendmsg() (not the shared aa_sock_msg_perm() helper, which recvmsg also uses) and call aa_sk_perm() directly, mirroring the selinux and tomoyo fixes. sk_is_tcp() does not cover MPTCP fast open, so the SOCK_STREAM/IPPROTO_MPTCP arm is explicit.
Severity
8.4 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < a16714e7cf2baa98ba2efddd5d6cbac641f4e76b (git)
Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 20383429b56974507c465d016e5238b189f7a246 (git)
Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 7f57428ce00891d26b0f087ef754a4d820ec83aa (git)
Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < faea60deaa05c76f0772650f42eafde12bd39d93 (git)
Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 07b71c342382b854ab8030b244aeab6a7228ad7d (git)
Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 4a69b83045d3195d5b9a9b053ad840ddb2998b4e (git)
Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 45ebb934ea50b436ce49b2f159f090dab0d7fa28 (git)
Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 4d587cd8a72155089a627130bbd4716ec0856e21 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.6
Unaffected: 0 , < 3.6 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.177 , ≤ 6.1.* (semver)
Unaffected: 6.6.144 , ≤ 6.6.* (semver)
Unaffected: 6.12.95 , ≤ 6.12.* (semver)
Unaffected: 6.18.38 , ≤ 6.18.* (semver)
Unaffected: 7.1.3 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "security/apparmor/lsm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a16714e7cf2baa98ba2efddd5d6cbac641f4e76b",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "20383429b56974507c465d016e5238b189f7a246",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "7f57428ce00891d26b0f087ef754a4d820ec83aa",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "faea60deaa05c76f0772650f42eafde12bd39d93",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "07b71c342382b854ab8030b244aeab6a7228ad7d",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "4a69b83045d3195d5b9a9b053ad840ddb2998b4e",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "45ebb934ea50b436ce49b2f159f090dab0d7fa28",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "4d587cd8a72155089a627130bbd4716ec0856e21",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "security/apparmor/lsm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.6"
            },
            {
              "lessThan": "3.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.177",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.144",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.95",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.38",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.177",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.144",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.95",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.38",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.3",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\napparmor: mediate the implicit connect of TCP fast open sendmsg\n\nsendmsg()/sendto() with MSG_FASTOPEN is a combination of connect(2) and\nwrite(2): it opens the connection in the SYN. apparmor_socket_sendmsg()\nonly checks AA_MAY_SEND, so a profile that grants send but denies connect\nlets a confined task open an outbound TCP/MPTCP connection that connect(2)\nwould have refused, bypassing connect mediation.\n\nMediate the implicit connect when MSG_FASTOPEN is set and a destination\nis supplied. Add it to apparmor_socket_sendmsg() (not the shared\naa_sock_msg_perm() helper, which recvmsg also uses) and call aa_sk_perm()\ndirectly, mirroring the selinux and tomoyo fixes. sk_is_tcp() does not\ncover MPTCP fast open, so the SOCK_STREAM/IPPROTO_MPTCP arm is explicit."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires a confined local process to invoke sendmsg(2)/sendto(2) with MSG_FASTOPEN; the vulnerable AppArmor LSM hook runs on the syscall path before TCP fast-open performs its implicit connect.\nAC:L - Any confined task that already has send permission can reliably trigger the bypass with a single sendmsg/sendto call using MSG_FASTOPEN and a destination address, with no race or special victim state required beyond TCP Fast Open client support.\nPR:L - The attacker must be an unprivileged process confined by an AppArmor profile that grants network send but denies connect (e.g., hardened Snap/sandboxed service profiles on Ubuntu); no real root or capabilities beyond normal confined-user execution are needed.\nUI:N - No victim interaction is required; the confined attacker process directly issues the bypassing syscall without needing another user or administrator to perform any action.\nS:C - Successful exploitation crosses the AppArmor confinement boundary, allowing a sandboxed task to establish outbound TCP/MPTCP connections that connect(2) mediation would have blocked, escaping the intended network policy scope.\nC:H - Bypassing connect mediation lets a confined process open TCP/MPTCP sessions to destinations policy forbids and read arbitrary response data from those services (internal APIs, metadata endpoints, C2 servers), constituting unauthorized information disclosure.\nI:H - The bypass enables unauthorized outbound connection establishment and transmission of arbitrary application data (including SYN-cookie data) to hosts explicitly denied by the AppArmor connect rule, violating integrity of the confinement policy.\nA:N - This is a pure LSM policy-bypass flaw with no kernel memory corruption, panic, oops, hang, or resource exhaustion; exploitation does not impact system availability."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T04:51:36.839Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a16714e7cf2baa98ba2efddd5d6cbac641f4e76b"
        },
        {
          "url": "https://git.kernel.org/stable/c/20383429b56974507c465d016e5238b189f7a246"
        },
        {
          "url": "https://git.kernel.org/stable/c/7f57428ce00891d26b0f087ef754a4d820ec83aa"
        },
        {
          "url": "https://git.kernel.org/stable/c/faea60deaa05c76f0772650f42eafde12bd39d93"
        },
        {
          "url": "https://git.kernel.org/stable/c/07b71c342382b854ab8030b244aeab6a7228ad7d"
        },
        {
          "url": "https://git.kernel.org/stable/c/4a69b83045d3195d5b9a9b053ad840ddb2998b4e"
        },
        {
          "url": "https://git.kernel.org/stable/c/45ebb934ea50b436ce49b2f159f090dab0d7fa28"
        },
        {
          "url": "https://git.kernel.org/stable/c/4d587cd8a72155089a627130bbd4716ec0856e21"
        }
      ],
      "title": "apparmor: mediate the implicit connect of TCP fast open sendmsg",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-63828",
    "datePublished": "2026-07-19T12:02:22.644Z",
    "dateReserved": "2026-07-19T07:54:57.014Z",
    "dateUpdated": "2026-08-17T04:51:36.839Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-63828",
      "date": "2026-09-16",
      "epss": "0.00131",
      "percentile": "0.03073"
    },
    "microsoft_vex": {
      "current_release_date": "2026-08-14T17:56:21.000Z",
      "cve": "CVE-2026-63828",
      "id": "msrc_CVE-2026-63828",
      "initial_release_date": "2026-07-20T01:07:39.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "apparmor: mediate the implicit connect of TCP fast open sendmsg",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-63828.json",
      "version": "7"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-63828\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-07-19T12:16:56.110\",\"lastModified\":\"2026-08-17T05:17:20.497\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\napparmor: mediate the implicit connect of TCP fast open sendmsg\\n\\nsendmsg()/sendto() with MSG_FASTOPEN is a combination of connect(2) and\\nwrite(2): it opens the connection in the SYN. apparmor_socket_sendmsg()\\nonly checks AA_MAY_SEND, so a profile that grants send but denies connect\\nlets a confined task open an outbound TCP/MPTCP connection that connect(2)\\nwould have refused, bypassing connect mediation.\\n\\nMediate the implicit connect when MSG_FASTOPEN is set and a destination\\nis supplied. Add it to apparmor_socket_sendmsg() (not the shared\\naa_sock_msg_perm() helper, which recvmsg also uses) and call aa_sk_perm()\\ndirectly, mirroring the selinux and tomoyo fixes. sk_is_tcp() does not\\ncover MPTCP fast open, so the SOCK_STREAM/IPPROTO_MPTCP arm is explicit.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"security/apparmor/lsm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"cf60af03ca4e71134206809ea892e49b92a88896\",\"lessThan\":\"a16714e7cf2baa98ba2efddd5d6cbac641f4e76b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf60af03ca4e71134206809ea892e49b92a88896\",\"lessThan\":\"20383429b56974507c465d016e5238b189f7a246\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf60af03ca4e71134206809ea892e49b92a88896\",\"lessThan\":\"7f57428ce00891d26b0f087ef754a4d820ec83aa\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf60af03ca4e71134206809ea892e49b92a88896\",\"lessThan\":\"faea60deaa05c76f0772650f42eafde12bd39d93\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf60af03ca4e71134206809ea892e49b92a88896\",\"lessThan\":\"07b71c342382b854ab8030b244aeab6a7228ad7d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf60af03ca4e71134206809ea892e49b92a88896\",\"lessThan\":\"4a69b83045d3195d5b9a9b053ad840ddb2998b4e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf60af03ca4e71134206809ea892e49b92a88896\",\"lessThan\":\"45ebb934ea50b436ce49b2f159f090dab0d7fa28\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf60af03ca4e71134206809ea892e49b92a88896\",\"lessThan\":\"4d587cd8a72155089a627130bbd4716ec0856e21\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"security/apparmor/lsm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.6\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.261\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.212\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.177\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.144\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.95\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.38\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.3\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N\",\"baseScore\":8.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.0,\"impactScore\":5.8}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/07b71c342382b854ab8030b244aeab6a7228ad7d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/20383429b56974507c465d016e5238b189f7a246\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/45ebb934ea50b436ce49b2f159f090dab0d7fa28\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4a69b83045d3195d5b9a9b053ad840ddb2998b4e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4d587cd8a72155089a627130bbd4716ec0856e21\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7f57428ce00891d26b0f087ef754a4d820ec83aa\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a16714e7cf2baa98ba2efddd5d6cbac641f4e76b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/faea60deaa05c76f0772650f42eafde12bd39d93\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-07-21T08:02:44+00:00",
      "cve": "CVE-2026-63828",
      "id": "CVE-2026-63828",
      "initial_release_date": "2026-07-19T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: apparmor: mediate the implicit connect of TCP fast open sendmsg",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63828.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-16T23:31:50Z",
      "cve": "CVE-2026-63828",
      "id": "CVE-2026-63828",
      "initial_release_date": "2026-07-19T17:34:36Z",
      "product_status:first_fixed": "65",
      "product_status:known_affected": "733",
      "product_status:known_not_affected": "4",
      "product_status:recommended": "46",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-63828",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-63828.json",
      "version": "12"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.