CVE-2026-66032
Microsoft · Published July 26, 2026
8.8
CVSS v3.1
HIGHPatch availableGet patch
Description
libssh2 Double-Free Heap Corruption via sftp_open(). libssh2 Double-Free Heap Corruption via sftp_open()
Affected Products
- azl3 libssh 0.10.6-8 on Azure Linux 3.0
- azl3 libssh2 1.11.1-4 on Azure Linux 3.0
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H