CVE-2026-25680
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
- Published May 22, 2026
- CVSS 6.5 medium
- 0.5% chance of exploitation in the next 30 days (EPSS)
Affected software
In the news
- Multiple vulnerabilities in VMware products CERT-FR ยท