CVE-2026-109706 Use-after-free in the Storage: IndexedDB component

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109706

A use-after-free vulnerability exists in the Storage: IndexedDB component of the Firefox and Thunderbird browsers. This flaw was addressed in Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . While the specific technical root cause or exploit details...

CVE-2026-109710

A use-after-free vulnerability exists in the Graphics: Text component of the Firefox and Thunderbird browsers. This flaw was addressed in Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . The vulnerability is associated with Bug 2068338 . While the t...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt vulnerability reproduction environment This repository is a snapshot of the reproducible vulnerability environment for CVE-2021-3975 libvirt qemuProcessHandleMonitorEOF use-after-free, CWE-416, exported from the corresponding container image yan5ui/cve-2021-3975:tier1...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes bsc1273290. CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdevput in...

CVE-2026-43499-S24U

CVE-2026-43499 for Galaxy S24 Ultra SM-S928U1 Public-source, device-specific implementation for the US Samsung Galaxy S24 Ultra running firmware S928U1UES6DZF2. Supported target Model: SM-S928U1 Codename: e3q Build / AP: S928U1UES6DZF2 / S928USQS6DZF2 Kernel:...

-Detection-and-Mitigation-for-CVE-2022-1679

-Detection-and-Mitigation-for-CVE-2022-1679 Description The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages...

CVE-2019-2215

CVE-2019-2215 Exploit for the Bad Binder vulnerability in Android written by @wired0ut. It abuses the UAF in order to leak taskstruct, then overwrites addrlimit and escalates privileges by overwriting the id block in cred. The full flow of the research and exploitation can be found here series of...

CVE-2026-94453

A use-after-free flaw was found in Libreswan's IKE-over-TCP handling. When a TCP connection closes and additional packet processing occurs for the same connection tuple, the IKE daemon may access a previously freed interface endpoint object. A remote, unauthenticated attacker may exploit this fla...

CVE-2026-109257

A flaw was found in FreeRDP. A remote attacker using a specially crafted Remote Desktop Protocol RDP client can request NSCodec compression with large display dimensions to trigger a memory allocation failure on the server. Because the server fails to properly clear memory pointers during error...

CVE-2026-109254

A flaw was found in FreeRDP. A use-after-free vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the client. During static audio channel disconnection, audio data structures are released before the background playback thread finishes...

STIG-Edge-RCE-CVE2025-9478

STIG – Microsoft Edge Chromium 139.0.3405.125 Remote Code Execution CVE-2025-9478, Plugin ID: 258091 Before Finding: Microsoft Edge version 139.0.3405.86 was outdated and vulnerable to a critical Remote Code Execution RCE flaw CVE-2025-9478. Risk: Attackers could exploit a use-after-free in ANGLE...

gemini-2.5-pro-nf-tables-red-teaming

Gemini 2.5 Pro nftables Red Teaming Case Study CVE-2023-32233 LLM Safety Research | Responsible Disclosure | AI Alignment Evaluation Researcher : Niranj R Mahaswar Destawell Google AI Vulnerability Reward Program : 889286 — Out of Scope Summary This repository documents a comparative LLM red...

CVE-2026-28318-check

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318 , an unauthenticated denial-of-service in SolarWinds Serv-U= 15.5.4.108. A single POST that carries Content-Encoding: deflate and a body feeds that body to an in-memory deflate...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution TL;DR. A malformed DUMP payload passed to RESTORE triggers a heap double-free in Redis's legacy hash-zipmap loader. Under default jemalloc the double-free is silent the server keeps running, which turns it into a controllab...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

firefox: thunderbird: Use-after-free in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Networking component...

firefox: thunderbird: Use-after-free in the Disability Access APIs component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Disability Access APIs component...

firefox: Sandbox escape due to use-after-free in the DOM: Navigation component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...

firefox: thunderbird: Use-after-free in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Navigation component...