CVE-2026-106358

A Use after free vulnerability exists in the Navigation component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by interacting with a crafted HTML page. The security severity is rated as Critical . Remediation is...

CVE-2026-106197

A Use after free vulnerability exists in the Google Chrome browser in versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by navigating the user to a crafted HTML page . While the severity is rated as Critical , no specific exploit li...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93787

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56906

A use-after-free vulnerability exists in the ep_free function of eventpoll.c , caused by a race condition . Additionally, memory corruption via use-after-free was identified in ep_get_upwards_depth_proc within fs/eventpoll.c . This flaw could allow for local escalation of privilege without requir...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93786

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55330

A use-after-free vulnerability exists in the BluetoothCccHandlerCallbackImpl function within the bluetooth_ccc.cc file due to a logic error. This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. While the specific...

CVE-2026-23918-poc

CVE-2026-23918 — التحرير المزدوج في Apache modhttp2 المتأثر: خادم Apache HTTP 2.4.66 مع modhttp2 + Event MPM تم الإصلاح في: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 عالي — تنفيذ تعليمات برمجية عن بُعد غير مصادق عليه ممكن CWE: CWE-415 تحرير مزدوج ما هي الثغرة يحتوي modhttp2 في Apache 2.4.66 على...

CVE-2026-23111

مُدقّق CVE-2026-23111 نواة لينكس nftables UAF يحتوي هذا المستودع على سكربت تدقيق آلي مكتوب بلغة Bash مصمم لتقييم الثغرة الأمنية CVE-2026-23111 بعمق ودقة في بيئات لينكس. 🔍 ما هي الثغرة الأمنية CVE-2026-23111؟ CVE-2026-23111 هي ثغرة من نوع Use-After-Free UAF اكتُشفت في النظام الفرعي nftables في نوا...

CVE-2019-2215

Bad-Binder CVE-2019-2215 ما يلي هو الاستغلال الخاص بثغرة bad binder CVE-2019-2215 التي تم اختبارها على محاكي x86. كان الهدف هو استغلال ثغرة UAF لتفعيل بدائية AAR لتسريب عناوين النواة، واستخدام بدائية AAW لاستبدال addrlimit مما يؤدي إلى بدائية قراءة وكتابة على مستوى النواة تسمح لنا بتعديل credstru...

CVE-2026-80842

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-80837

A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...

CVE-2026-80824

A flaw was found in the Linux kernel's USB subsystem usbfs. An unprivileged local attacker with read/write access to a /dev/bus/usb node could exploit a use-after-free vulnerability. This occurs because the usbdevice structure is prematurely freed before all pending operations are completed...

CVE-2026-80848

A flaw was found in the xfrm: espintcp component of the Linux kernel. A race condition exists during the closure of espintcp sockets, where a memory buffer skb can be freed while still being accessed by another process. This Use-After-Free UAF vulnerability could allow a local attacker to cause...

CVE-2026-80849

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. When a network connection using TCP-AO is re-established with a different server, a timing issue can cause the system to attempt to use memory that has already been released. This 'use-after-free' vulnerabilit...

CVE-2026-80778

A flaw was found in the Linux kernel. A race condition exists in the futex/pi Fast Userspace Mutexes / Priority Inheritance subsystem. When a private futex key borrows a waiter's memory management mm structure without proper referencing, the attachtopiowner function can accept an owner from a...