CVE-2026-91096Published
In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases before v2025.08.18.00) failed to unregister read callbacks for streams that were no longer open before de…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-91096 · Microsoft / collected KEV context
cve-program · CVE-2026-91096
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.