CVE-2026-107886

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...

CVE-2026-107886

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...

CVE-2026-107886

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...

EUVD-2026-95470

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...

CVE-2026-107886

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...

CVE-2026-107886

OpenPrinting CUPS versions prior to 2.4.20 are vulnerable to a double-free vulnerability in the printer-class management component. The issue occurs because add_class() frees pclass->printers without clearing the pointer; if subsequent validation fails, the class retains a dangling pointer tha...

CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-

CVE-2026-21007 – GPU Driver ioctl Race Condition Kernel Memory Mapping Program Code C sim // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int locked = 0; void ioctlmapsizet size // Allocate GPU memory and m...

panopticon

DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...

CVE-2021-31166

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. According to this tweet the vulnerability has...

OPENSUSE-SU-2026:22041-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 155 promoted to stable - 155.0.8059.39 boo1284354: CVE-2026-106382: Use after free in Chromecast CVE-2026-106197: Use after free in Browser CVE-2026-106358: Use after free in Navigation CVE-2026-106347: Use after...

CVE-2026-106193

An use after free flaw was found in the Parser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/557729858...

CVE-2023-21688

Big fire collab with @cof123 on SIDECHANNEL info leak + CVE-2022-38029 chainKALPC UAF+ carrotc4k3 sidechannel Under Construction... Please come back later... Not finished yet...

CVE-2022-21974

CVE-2022-21974: Unitialized pointer free in RMSRoamingSecurity Remote Code Execution Root-cause The RMSRoamingSecurity!ATL::CComCreator ::CreateInstance constructor allocates and initializes a CRmsRoamingSecurity object 0x3470 bytes but it fails to initialize completely its state. For example, at...

CVE-2022-21971

CVE-2022-21971: Uninitialized pointer free in prauthproviders Root-cause The WapAuthProvider::CreateInstance constructor allocates and initializes a WapAuthProvider object 0x78 bytes but it fails to initialize completely its state. The pointer at offset 0x50 is uninitialized and free'd when the...

PT-2026-108723

A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders src/serializers/decoders//decode graph entities.c in FalkorDB before 4.18.1 allows a remote attacker who can issue Redis replication commands for example, against an instance with no...

PT-2026-108764

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf link prime inserts a link into link idr before anon inode getfile succeeds and before bpf link settle publishes the ID in link-id. bpf link by id treats such an ID-zero link as...

ROS-20261009-73-0115

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261009-73-0489

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

AlmaLinux 10 : kernel (ALSA-2026:77690)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:77690 advisory. kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel...

PT-2026-108951

Name of the Vulnerable Software and Affected Versions gVisor versions prior to 20260831.0 Description A use-after-free issue exists in the VFS Virtual File System that allows a local attacker with standard container privileges to achieve code execution in the host sentry process. This is...