8.0Yüksek
CVE-2026-85965Use-after-free in Progress MarkLogic Server JavaScript engine integration
Açıklama
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.
Zayıflık türü (CWE):
CWE-416
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Progress Software Corporation | MarkLogic Server | 11.0.0 – < 11.3.7, 12.0.0 – < 12.1.0 |