CVE-2023-44487: listed in the CISA KEV catalog CVE-2023-44487 · CVSS 7.5 HIGH · EPSS 100.0% · KEV 2023-10-10
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Is CVE-2023-44487 exploited? Listed in the CISA KEV catalog on 2023-10-10. Federal remediation due 2023-10-31. Past that date by 1019 days. EPSS puts exploitation in the next 30 days at 100.0%. Public exploit code: proof of concept. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2023-44487 Primary sources What this record does not say No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-15.
CVE-2023-44487: listed in the CISA KEV catalog CVE-2023-44487 · CVSS 7.5 HIGH · EPSS 100.0% · KEV 2023-10-10
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Is CVE-2023-44487 exploited? Listed in the CISA KEV catalog on 2023-10-10. Federal remediation due 2023-10-31. Past that date by 1019 days. EPSS puts exploitation in the next 30 days at 100.0%. Public exploit code: proof of concept. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2023-44487 Primary sources What this record does not say No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-15.