CVE-2026-41607
Microsoft · Published April 30, 2026
6.5
CVSS v3.1
MEDIUMPatch availableGet patch
Description
Apache Thrift: C++ JSON OOB read. Apache Thrift: C++ JSON OOB read
Affected Products
- cbl2 ceph 16.2.10-11 on CBL Mariner 2.0
- azl3 thrift 0.15.0-5 on Azure Linux 3.0
- azl3 thrift 0.15.0-6 on Azure Linux 3.0
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U