CVE-2026-44927 LOW

CVE-2026-44927

Vendor Uriparser

Product uriparser

Weakness CWE-197

Published May 8, 2026

Last update May 10, 2026

View on NVD All CVEs

CVSS base score

2.9/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction None

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

In uriparser before 1.0.2, there is pointer difference truncation to int in various places.

Key dates

02Disclosure timeline

May 8, 2026 CVE published

May 10, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-44927 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/197.html

Related vulnerabilities

04Related CVE

CVE-2024-30014 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-37337 Microsoft SQL Server Native Scoring Information Disclosure Vulnerability CVE-2024-21310 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2024-21391 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2026-32240 Cap'n Proto: Integer overflow in KJ-HTTP chunk size