CVE-2026-69150

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

CVE-2026-69150

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

UBUNTU-CVE-2026-69150

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

CVE-2026-79610

XSA-501 was about issues with v1 - v2 and v2 - v1 changes racing certain other grant table operations. Sadly a v2 - v1 - v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again. Hence...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Non-destructive mass scanner for the NGINX HTTP/3 QUIC use-after-free Inventory which of your hosts are exposed — without ever triggering the bug. ⚠️ Disclaimer This tool is for authorized security testing only — your own infrastructure, or systems you have...

CVE-2026-69150

The KeePassXC cross-platform password manager is vulnerable to a heap use-after-free flaw in the KeePass1 / KDB legacy importer prior to version 2.8.0-beta1 . The root cause is the retention of raw Entry pointers in the m_entryUuids map after metastream entries are deleted. A crafted, unlockable ...

CVE-2026-69150

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

CVE-2026-69150 KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

EUVD-2026-98810

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

CVE-2026-69150

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

CVE-2026-69150 KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

CVE-2026-90256

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A use-after-free UAF vulnerability can occur when hciconn::l2capdata is accessed without proper locking during the disconnection indication process. This can lead to a system crash or...

CVE-2026-90225

A flaw was found in the Near Field Communication NFC Logical Link Control Protocol LLCP subsystem of the Linux kernel. A race condition exists between the nfcllcpgetsockopt and llcpsockbind functions. This allows a local attacker to potentially cause a use-after-free vulnerability by racing a...

CVE-2026-90224

A flaw was found in the Near Field Communication NFC Controller Interface NCI subsystem of the Linux kernel. A double completion race condition can occur when nciclosedevice and ncirxwork concurrently call ncidataexchangecomplete. This can lead to a use-after-free vulnerability, where a network...

CVE-2026-90222

A flaw was found in the Linux kernel's Near Field Communication NFC PN533 driver. A race condition can occur during frame transmission where a memory buffer is prematurely released while the I2C transport is still attempting to use it. This use-after-free vulnerability can lead to system...

CVE-2026-90320

A flaw was found in the Oracle Cluster File System 2 ocfs2 component of the Linux kernel. This vulnerability occurs due to insufficient validation of external extended attribute xattr entries when reading metadata. A local attacker could craft malicious xattr metadata, leading to a use-after-free...

CVE-2026-90319

A flaw was found in the Linux kernel's rapidio component. When the rioaddnet function fails, a pointer to a network object mport-net is not properly cleared, leaving it pointing to a memory area that has already been released. A subsequent operation to unregister the mport can then attempt to...

CVE-2026-90317

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. In sleepable BPF programs, a use-after-free vulnerability can occur due to improper handling of RCU Read-Copy-Update protected pointers after a spin unlock operation. A local attacker with limited capabilities could...

CVE-2026-90316

A flaw was found in the Linux kernel's drm/omap DSI Display Serial Interface driver. The driver incorrectly copied the Interrupt Service Routine ISR table, which could lead to a Use-After-Free UAF vulnerability. This occurs when stack-allocated objects are accessed after they have been deallocate...