What is CVE-2026-115383?

CVE-2026-115383 is a security advisory published by Microsoft Security Response Center (MSRC) with Medium severity. Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports

Which CVE IDs does CVE-2026-115383 cover?

CVE-2026-115383 covers the following CVE IDs: CVE-2026-115383. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-115383?

CVE-2026-115383 has a CVSS v3 base score of 4.8, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-115383?

CVE-2026-115383 affects 3 products, including: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0; azl3 openvmm 0.1.0-1 on Azure Linux 3.0; azl3 rust 1.96.1-2 on Azure Linux 3.0.

CVE-2026-115383MediumCVSS 4.8

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports

Vendor

Microsoft Security Response Center (MSRC)

Published

October 25, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-115383 →

🎯 Affected products3

azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0
azl3 openvmm 0.1.0-1 on Azure Linux 3.0
azl3 rust 1.96.1-2 on Azure Linux 3.0

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-115383
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade