cvedb.io
CVE-2023-44487
HIGH · CVSS 7.5 ⚠ KEV — EXPLOITED
EPSS exploitation probability: 100%
⚠ Listed in the CISA Known Exploited Vulnerabilities catalog — actively exploited.
Published 2023-10-10 · Last modified 2026-08-11T19:37:30.880

Summary

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Affected products

IETF — HTTP/2

Does this affect you?

Add your gear to cvedb and we'll alert you only when IETF ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.