HIGH 7.5 Microsoft
CVE-2024-45773
A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00.
Microsoft Security Update 2026-Aug: A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00.
Affected Products
- azl3 thrift 0.15.0-5 on Azure Linux 3.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-45773
- https://nvd.nist.gov/vuln/detail/CVE-2024-45773
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-08-06 via Microsoft. Affected: azl3 thrift 0.15.0-5 on Azure Linux 3.0.
vulnfeed aggregates 9044 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.