AS ABAP Kernel Memory Corruption: CVE-2026-76970 · CVSS 3.0 7.5 · SAP Note 3792915
Note 3792915 fixes improper validation of boundary conditions in a parsing routine of the AS ABAP kernel. An unauthenticated attacker could send requests that corrupt memory. As a result, the affected processes crash and restart. Moreover, repeating the requests keeps the system unavailable. SAP rates the AS ABAP Kernel Memory Corruption at CVSS 7.5, High. In this post, we cover exposure, the fix and what to check.
AS ABAP Kernel Memory Corruption: affected kernels
This issue affects kernel 7.22 (including EXT, EX2 and EX3), 7.53, 7.54, 7.77, 7.93, 8.04 and 9.16 to 9.21. In addition, SAP links this note to an earlier fix via FAQ note 3746868, which covers Notes 3714806 and 3792915 together.
Deployment
Deploy the fix through the SP Stack Kernel (SAPEXE.SAR and SAPEXEDB.SAR). Alternatively, if you need it sooner, use the dw.sar hotfix and follow SAP Notes 2083594 and 19466. Either way, the same kernel update also covers the other kernel notes of the month, including this one.
Note on availability
According to SAP, some kernels may not have a patch level in the Support Package Patches section yet. In that case, the correction for the AS ABAP Kernel Memory Corruption is not available for that kernel. Therefore, check the note again before planning, and subscribe to it.
What to do
Include the fix in this month’s kernel update, since there is no workaround. Meanwhile, keep the usual network rules in place, so that only expected clients reach the application server ports. Finally, watch for repeated work process restarts, because they can point to attempts to exploit the AS ABAP Kernel Memory Corruption.
AS ABAP Kernel Memory Corruption: advisory details
Component: BC-ABA-SC
SAP priority: High
First release: 10.11.2026
Reviewed release: 10 November 2026, note version 2
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: SAP Security Note 3792915 (SAP for Me; sign-in needed). The patch and workaround details above reflect the version we reviewed on 10 November 2026. However, SAP sometimes updates notes after release, so check the current note before you plan.
Read the full SAP Security Patch Day November 2026 overview.
