CVE-2026-94652EPSS p34.6%

CVE-2026-94652CVE-2026-94652

Description

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

Scoring

EPSS0.43% probability of exploitation · percentile 34.6% · 2026-10-05T12:00:23Z
Last modified2026-10-05
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.