Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-68523 · Microsoft / collected KEV context

EUVD-2026-82432

GHSA-j5cx-ph8g-95v3

RUSTSEC-2026-0200

cve-program · CVE-2026-68523

• https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-j5cx-ph8g-95v3
• https://github.com/fulgur-rs/fulgur/pull/501
• https://rustsec.org/advisories/RUSTSEC-2026-0200.html

euvd · EUVD-2026-82432

• https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-j5cx-ph8g-95v3
• https://github.com/fulgur-rs/fulgur/pull/501
• https://rustsec.org/advisories/RUSTSEC-2026-0200.html

nvd · CVE-2026-68523

• https://github.com/fulgur-rs/fulgur/pull/501
• https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-j5cx-ph8g-95v3
• https://rustsec.org/advisories/RUSTSEC-2026-0200.html

osv · GHSA-j5cx-ph8g-95v3

• https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-j5cx-ph8g-95v3
• https://github.com/fulgur-rs/fulgur/pull/501
• https://github.com/fulgur-rs/fulgur
• https://rustsec.org/advisories/RUSTSEC-2026-0200.html

osv · RUSTSEC-2026-0200

• https://crates.io/crates/fulgur
• https://rustsec.org/advisories/RUSTSEC-2026-0200.html
• https://github.com/fulgur-rs/fulgur/pull/501

No related operational record is retained in the current change model.