8.0Yüksek

CVE-2026-85965Use-after-free in Progress MarkLogic Server JavaScript engine integration

Progress Software Corporation MarkLogic Server Yayım: (1 ay önce)

Açıklama

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.

Zayıflık türü (CWE): CWE-416

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Progress Software Corporation MarkLogic Server 11.0.0 – < 11.3.7, 12.0.0 – < 12.1.0

Kaynaklar ve yamalar