Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-93393

Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

CVSS 4.0 9.2 CRITICALCVSS 3.1 8.1 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-93393

Published

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming encrypted traffic after the TLS handshake completes. No authentication or user interaction is required, because the affected processing occurs before any application-level authentication completes. Triggering this issue may lead to memory corruption in the client process, disclosure of adjacent heap memory, or termination of the process.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-93393

Published

C Driver

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "MongoDB Inc.",
                    "product": "C Driver",
                    "platforms": [
                        "Windows"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "2.4.0",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "2.3.0",
                            "lessThanOrEqual": "2.3.3",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "2.2.0",
                            "lessThanOrEqual": "2.2.4",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "2.1.0",
                            "lessThanOrEqual": "2.1.2",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "2.0.0",
                            "lessThanOrEqual": "2.0.2",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "1.30.0",
                            "lessThanOrEqual": "1.30.8",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "1.29.0",
                            "lessThanOrEqual": "1.29.2",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "1.28.0",
                            "lessThanOrEqual": "1.28.1",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "1.27.0",
                            "lessThanOrEqual": "1.27.6",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "1.26.0",
                            "lessThanOrEqual": "1.26.2",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "1.25.0",
                            "lessThanOrEqual": "1.25.4",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "1.24.0",
                            "lessThanOrEqual": "1.24.4",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON