CVE-2026-44747 | THREATINT

Description

SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.

PUBLISHED Reserved 2026-05-07 | Published 2026-07-14 | Updated 2026-07-14 | Assigner sap

CRITICAL: 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-787: Out-of-bounds Write

Product status

Default status

unaffected

KRNL64NUC 7.22

affected

7.22EXT

affected

KRNL64UC 7.22

affected

7.53

affected

KERNEL 7.22

affected

7.53. 7.54

affected

7.77

affected

7.89

affected

7.93

affected

9.16

affected

9.18

affected

9.19

affected

9.20

affected

References

me.sap.com/notes/3747367

url.sap/sapsecuritypatchday

cve.org (CVE-2026-44747)

nvd.nist.gov (CVE-2026-44747)

Download JSON