What is CVE-2026-49762?

CVE-2026-49762 is a security advisory published by Microsoft Security Response Center (MSRC) with Medium severity. Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service

Which CVE IDs does CVE-2026-49762 cover?

CVE-2026-49762 covers the following CVE IDs: CVE-2026-49762. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2026-49762?

CVE-2026-49762 affects 2 products, including: azl3 elixir 1.16.1-1 on Azure Linux 3.0; azl3 elixir 1.16.1-2 on Azure Linux 3.0.

CVE-2026-49762Medium

Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service

Vendor

Microsoft Security Response Center (MSRC)

Published

June 10, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-49762 →

🎯 Affected products2

azl3 elixir 1.16.1-1 on Azure Linux 3.0
azl3 elixir 1.16.1-2 on Azure Linux 3.0

✅ Remediation

KBCBL-Mariner Releases (Security Update) — fixed build 1.16.1-2

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49762
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade