CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-10-31
Apache Thrift Java Bindings Uncontrolled Recursion Denial of Service Vulnerability (CVE-2026-120135)
[Affected Scope] Java-based applications and services utilizing Apache Thrift versions prior to 0.24.0
[Impact] Processing maliciously crafted nested messages can trigger a Stack Overflow, leading to an unrecoverable JVM crash and Denial of Service (DoS)
[Mitigation] Immediately upgrade the Apache Thrift Java library dependency to version 0.24.0 or later