ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt vulnerability reproduction environment This repository is a snapshot of the reproducible vulnerability environment for CVE-2021-3975 libvirt qemuProcessHandleMonitorEOF use-after-free, CWE-416, exported from the corresponding container image yan5ui/cve-2021-3975:tier1...

CVE-2026-42530

🛡️ CVE-2026-42530 - NGINX HTTP/3 QUIC Use-After-Free Vulnerability High-Severity Use-After-Free in NGINX HTTP/3 QUIC ⚠️ QPACK Encoder Stream Vulnerability 🔍 Overview CVE-2026-42530 is a use-after-free vulnerability in NGINX's ngxhttpv3module...

CVE-2026-5281-Research-Toolkit

Kit di Ricerca CVE-2026-5281 Chrome WebGPU Use-After-Free CWE-416 Questo kit è destinato alla ricerca sulla sicurezza e alla verifica difensiva relativa a CVE-2026-5281. Versione di Chrome corretta: 146.0.7680.178 Versioni potenzialmente vulnerabili: qualsiasi versione precedente alla...

UBUNTU-CVE-2026-74969

Use-after-free in the Layout: Text and Fonts component. This vulnerabi...

MINI-5WVV-X3C5-VM7J

Bulletin has no description...

CVE-2026-19145 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C494-M2FQ-59MX Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an...

CVE-2026-61349

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56383

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-11894

The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...

CVE-2026-11894

The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...

CVE-2026-11894 Double-free / use-after-free in Realtek BEE Bluetooth HCI driver `send()` error paths

The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...

CVE-2026-11894

The CVE-2026-11894 entry concerns Realtek’s BEE Bluetooth HCI driver (bt_hci_bee_send in drivers/bluetooth/hci/hci_bee.c). The vulnerability arises from violating the bt_hci_driver_api buffer-ownership contract: on error, the host should retain and unref the transmit net_buf, but the pre-fix code...

EUVD-2026-55937

The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...

CVE-2026-11894 Double-free / use-after-free in Realtek BEE Bluetooth HCI driver `send()` error paths

The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...

PT-2026-70650

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2021-9894

Malicious code in bioql PyPI...

IBM MQ 9.3 < 9.4.3 CD / 9.4 < 9.4.0.12 LTS / 9.4.3 (7238310)

The version of IBM MQ Server running on the remote host is affected by a vulnerability as referenced in the 7238310 advisory. - An IBM MQ Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. CWE: CWE-416: Use After Free CVE-2025-3631 Note th...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues

Summary Multple vulnerabilities affect IBM Sterling Secure Proxy and are addressed in the latest release and iFix Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security component could allow a remote attacker to cause high...

Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues

Summary Multple vulnerabilities affect IBM Sterling External Authentication Server and are addressed in the latest iFixes Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security component could allow a remote attacker to cause high...