CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-7531 — Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follo...

·Source: NIST NVD

Updated:

Executive Summary

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 (released in 5.9.1): a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory.

Analysis

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 (released in 5.9.1): a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory. CVSS Score: 9.8. Published: 2026-06-25T20:17:17.763.

Indicators of Compromise (2)

CVE (2)
CVE-2026-5460
NVDMITRE CVE
CVE-2026-7531
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jun 25, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Standard Chartered gives institutional clients access to USDC minting and redemption

Standard Chartered has teamed up with Circle to enable its institutional clients to access USDC stablecoin minting and redemption.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-57100 — Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (Sync...

Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

CVE-2026-57100
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-45499 — Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker...

Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.

CVE-2026-45499
NIST NVD