CVE-2026-91095Published
In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could return stream handles that the stream handler had already freed. HQSession then inst…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-91095 · Microsoft / collected KEV context
cve-program · CVE-2026-91095
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.