CVE-2026-97811

A double free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 (Double Free) and CWE-400 (Uncontrolled Resource Consumption). While the impact is categorized as high for confident...

CVE-2026-97772

A double free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The issue is classified with a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this vulnerability; users are advised to install ...

CVE-2026-95943

A double free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. An official fix is ava...

CVE-2026-88171

A double free vulnerability in the Windows DHCP Server allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-415 . While the severity is high, the exploit code maturity is currently listed as unproven . No specific exploit link...

CVE-2026-88149

A double free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity rating with a CVSS 3.1 score of 7.0. No specific exploit details or direct links to in-th...

CVE-2026-83634

A double free vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While the specific component or file is not detailed in the provided documents, the impact involves high consequences for confidenti...

CVE-2026-97767

A double free vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact is rated as HIGH with a CVSS 3.1 score of 8.8 . Microsoft has released updates to address this vulnerability; users are encouraged ...

CVE-2026-97749

A double free vulnerability in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability has a CRITICAL CVSSv3.1 base score of 9.8 . Microsoft has released updates to address this issue; users are recommended to install the latest...

CVE-2026-96864

A double free vulnerability exists in the Microsoft Failover Cluster Virtual Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS 3.1 score of 9.8 . While the documents confirm the impact is the...

CVE-2026-88071

A double free vulnerability exists in Windows Hyper-V , which can be exploited by an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), the documents do not provide specific details regarding the affected component, file, or speci...

CVE-2026-85936

A Double free vulnerability in the Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is categorized under CWE-415 (Double Free) and CWE-122 (Heap-based Buffer Overflow). The issue results in High severity impacts on confidentiality, integri...

CVE-2026-85829

A double free vulnerability exists in the Windows Wired AutoConfig Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 . No specific exploitation details or remediation steps are provided in the documents beyond th...

CVE-2026-84012

A double free vulnerability exists in the Remote Desktop Gateway Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-415 . While the specific software versions and detailed root causes are not explicitly lis...

CVE-2026-83916

A double free vulnerability in Windows Error Reporting allows an authorized attacker to achieve local code execution . The vulnerability is characterized by a CWE-415 flaw, which can lead to significant impacts on confidentiality, integrity, and availability . An official fix is available, and sp...

CVE-2026-83842

A double free vulnerability exists within the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation involves applying the official fix from Microsoft.

CVE-2026-70062

A double free vulnerability exists in Windows Libarchive , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a high base score of 8.1 with a network attack vector and high complexity. No specific exploit details or re...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...

CVE-2026-106175

A Double Free vulnerability CWE-415 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions,...

CVE-2026-106175

A Double Free vulnerability [CWE-415] exists in several Fortinet products, including FortiOS (7.6.0 through 7.6.7, 7.4, 7.2), FortiProxy (7.6.0 through 7.6.6, 7.4, 7.2), and FortiSwitch (7.6.0 through 7.6.6, 7.4, 7.2). This flaw allows a local authenticated attacker to crash the newcli daemon by ...

CVE-2023-25136

OpenSSH CVE-2023-25136 Pre-Auth Double Free – Writeup and POC What is OpenSSH? OpenSSH is a popular tool used for secure communication and remote access. It was developed as a free, open-source implementation of the Secure Shell SSH communications protocol and is widely used for various...