CVE detail
CVE-2026-9080
Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 4
- within the 30d window
- Peak daily
- 3
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- CVE-2026-9080 UAF after pause in socket callbackMicrosoft MSRC
Information published.
vendormsrc.microsoft.comJul 7, 2026, 8:43 AM - https://hackerone.com/reports/3749204hackerone.com
No excerpt available.
Exploithackerone.comJul 3, 2026, 7:16 AM No excerpt available.
Vendor Advisorycurl.seJul 3, 2026, 7:16 AMNo excerpt available.
Vendor Advisorycurl.seJul 3, 2026, 7:16 AM- Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release YetSecurity Affairs
Curl fixed 18 vulnerabilities, including a 25-year-old bug, with issues spanning auth bypass, memory safety, and host validation in libcurl. Curl maintainers addressed eighteen vulnerabilities with a single update, and one of them goes back 25 years. That’s not a typo, it really sat there since the early 2000s. curl is a widely used open-source […]
newssecurityaffairs.comJun 25, 2026, 7:20 PM - 25-Year-Old Vulnerability Patched in CurlSecurityWeek
The latest version of the open source data transfer tool resolves 18 medium and low-severity vulnerabilities.
newswww.securityweek.comJun 25, 2026, 9:25 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-10536CVSS 9.8 · Critical
A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subseq…
- CVE-2026-3805CVSS 7.5 · High
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
- CVE-2023-28319CVSS 7.5 · High
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl…
- CVE-2022-43552CVSS 5.9 · Medium
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) den…
- CVE-2021-22901CVSS 8.1 · High
curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A mali…
- CVE-2018-16840CVSS 9.8 · Critical
A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in th…