CVE-2026-108461

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the documents confirm the existence of the vulnerabilit...

CVE-2026-105722

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The official CVSS 3.1 score is 7.0, reflecting a high severity with significant impacts on confidentiality, integrity, and availability...

CVE-2026-108458

A Use after free vulnerability exists in the Remote Desktop Client . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated with a HIGH base severity score of 8.8. Remediation is available via an OFFICIAL_FIX provided by Microso...

CVE-2026-108468

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 and is categorized under CWE-416 . No specific exploit details or patch versions are provided...

CVE-2026-105725

A Use after free vulnerability exists in the Windows Security App . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High). Remediation is available via an official fix provided by M...

CVE-2026-104342 Adobe Framemaker | Use After Free (CWE-416)

Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104342

Adobe FrameMaker is affected by a Use After Free vulnerability (CWE-416) that could lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction, specifically the opening of a malicious file. Adobe has released a security update to address this a...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...

CVE-2026-23111

CVE-2026-23111 Auditor Linux Kernel nftables UAF This repository contains an automated audit script in Bash designed to deeply and accurately evaluate the CVE-2026-23111 vulnerability in Linux environments. 🔍 What is the CVE-2026-23111 vulnerability? CVE-2026-23111 is a Use-After-Free UAF...

CVE-2026-106175

A Double Free vulnerability CWE-415 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions,...

CVE-2019-0211-exploit

CVE-2019-0211 — Apache HTTP Server Local Privilege Escalation CARPE DIEM Description CVE-2019-0211 is a local privilege escalation vulnerability affecting Apache HTTP Server between versions 2.4.17 and 2.4.38 using modprefork and modphp or PHP-FPM. The vulnerability allows an attacker with a shel...

CVE-2026-106175

A Double Free vulnerability [CWE-415] exists in several Fortinet products, including FortiOS (7.6.0 through 7.6.7, 7.4, 7.2), FortiProxy (7.6.0 through 7.6.6, 7.4, 7.2), and FortiSwitch (7.6.0 through 7.6.6, 7.4, 7.2). This flaw allows a local authenticated attacker to crash the newcli daemon by ...

CVE-2026-93200

A flaw was found in the Linux kernel's i3c master driver. This use-after-free vulnerability occurs because sysfs attribute callbacks can attempt to access memory that has already been deallocated. An attacker could potentially exploit this to cause system instability or a denial of service...

CVE-2026-93194

A flaw was found in the drm/rockchip: dwdp component of the Linux kernel. This vulnerability occurs because core resources, such as the DisplayPort AUX channel, are initialized but never properly released when the dwdpbind function is called. This oversight can lead to memory leaks and a...

CVE-2026-93189

A flaw was found in the Linux kernel's Human Interface Device HID core. When a driver's probe fails after enabling input delivery, the hidhwstop function may free a hidraw structure while in-flight HID reports are still being processed. This timing issue can lead to a use-after-free vulnerability...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...

CVE-2018-17182

CVE-2018-17182 Linux kernel VMA-UAF privilege escalation vulnerability CVE-2018-17182 About Google Project Zero cybersecurity researchers have released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel that has been present since kernel versions 3.16...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. CVE-2026-93517: GLX...

SUSE-SU-2026:4647-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. -...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. CVE-2026-93517: GLX...