Is there a patch available for CVE-2026-45383?

Yes, a patch is available for CVE-2026-45383. Update the affected software to the latest version immediately.

Ubuntu CVE-2026-45383

Q: What is the CVSS score of CVE-2026-45383?

CVE-2026-45383 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-46429 MEDIUM

Out-of-bounds Read (CWE-125)

2026-07-01 vendor:ubuntu

Buffer Overflow Information Disclosure

6.9

CVSS 4.0 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (vendor:ubuntu) · only source for this CVE.

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Jul 21, 2026 - 21:22 NVD

6.9 (MEDIUM)

Analysis Generated

Jul 03, 2026 - 23:34 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

CVE-2026-45383 has no publicly available description, CVSS score, CWE classification, or technical details at time of analysis. The sole intelligence signal is a report attribution to the Ubuntu vendor source, suggesting this may affect a package within the Ubuntu ecosystem. No impact, attack vector, or affected version data can be synthesized without a description - any characterization beyond this would be fabricated.

Technical ContextAI

No technical context can be established. The CVE record lacks a description, CWE root-cause classification, CPE product strings, and CVSS vector. The reporting source 'vendor:ubuntu' indicates Ubuntu's security team may have filed or acknowledged this CVE, which could implicate a core Ubuntu package, a bundled library, or an upstream component distributed via Ubuntu repositories. Without CPE data, the specific component cannot be identified.

RemediationAI

No remediation can be recommended at this time. No patch version, advisory URL, or vulnerability description is available. Defenders should monitor Ubuntu Security Notices and the NVD entry for CVE-2026-45383 for updates. No vendor-released patch has been identified at time of analysis. Do not apply generic mitigations without understanding the actual attack surface.