https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:35:23.610634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-07340 cnvd-2016-07340 2026-10-02T19:35:23.694305+00:00 cnvd-2016-07340 https://cve.radiocsirt.org/vuln/euvd-2026-86504 EUVD-2026-86504 2026-10-02T19:35:23.694343+00:00 EUVD-2026-86504 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7153 fkie_cve-2016-7153 2026-10-02T19:35:23.694357+00:00

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.

 https://cve.radiocsirt.org/vuln/ghsa-64x6-q8pq-xjmg GHSA-64x6-q8pq-xjmg 2026-10-02T19:35:23.694387+00:00

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.

 https://cve.radiocsirt.org/vuln/gsd-2016-7153 gsd-2016-7153 2026-10-02T19:35:23.694404+00:00 gsd-2016-7153 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7153 UBUNTU-CVE-2016-7153 2026-10-02T19:35:23.694414+00:00

Affected: Ubuntu:16.04:LTS: oxide-qt

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.