Get real-time updates on Telegram
P5Verified
CVE-2026-18503: CPython 0 to before 3.10.21, 3.11.0 to before 3.11.16, 3.12.0 to before 3.12.14, 3.13.0 to before 3.13.15, 3.14.0 to…
CVE-2026-18503. EPSS 0.00119 (percentile 0.01637), scored 12-Oct-2026.
Affected technology
CPython · 0 to before 3.10.21, 3.11.0 to before 3.11.16, 3.12.0 to before 3.12.14, 3.13.0 to before 3.13.15, 3.14.0 to before 3.14.7, 3.15.0a1 to before 3.15.0rc1, 3.16.0a1 to before 3.16.0
Python Software Foundation
Component: csv
Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · Passive user interaction
What an attacker can do
Vendor/CNA’s CVSS 4.0 assessment (base score 2.4/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-1176
- CCR priority
- 0.0 /100 (P5)
- EPSS
- 0.00119 · percentile 0.01642 · 2026-10-13
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-14 05:19:44.455882+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-18503.html