Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
CVE-2026-93682
Scope
What the vendor says is affected
- azl3 php 8.3.33-1 on Azure Linux 3.0
Next step
What the vendor recommends
Release Notes
Review the complete instructions on the vendor's siteTimeline
When this advisory changed
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Updated by Microsoft Security Response Center
The vendor changed the advisory after it was first published.
- Added to SecurityAlert
We collected the advisory from the official source.
Vulnerabilities