163694 matches found
CVE-2026-116540
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssltlsextticketkeycb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed...
CVE-2026-116540 netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssltlsextticketkeycb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed...
EUVD-2026-109910
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssltlsextticketkeycb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed...
CVE-2026-116540
The netty-tcnative library, specifically versions 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x , contains a Use-After-Free vulnerability (CWE-416) in the ssl_tlsext_ticket_key_cb function. This issue occurs during session ticket key rotation; if a remote client performs a TLS handsh...
CVE-2026-99095
The Linux kernel contains a vulnerability in the drm/vc4 driver where the hangcheck timer and job_done_work are not properly stopped during teardown. Specifically, vc4_irq_disable() fails to cancel these tasks, leading to situations where a timer reads V3D registers through a NULL pointer and lat...
EUVD-2026-109901
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D unbind Nothing stops the hangcheck timer that submitted jobs arm, or the jobdonework that the render-done interrupt queues, at teardown: vc4irqdisable cancels only...
Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to remote code execution (CVE-2026-109618, CVE-2026-109619)
Summary IBM App Connect Enterprise Toolkit pattern generation using a PHP API for user-defined patterns is vulnerable to remote code execution. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
vvdecapp Decoder Heap Buffer Overflow DoS
The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
vvdecapp readAlf Heap Buffer Overflow DoS
The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
vvdecapp decoder reconstructCoeff Heap Buffer Overflow DoS
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after deallocation when processing specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109619: PHP2Shell — Security Research Lab & PoC...
CVE-2026-98870
A flaw was found in the Linux kernel's ksmbd Server Message Block SMB server. A remote attacker could trigger this vulnerability by establishing and terminating bound SMB channels, leaving stale connection references attached to active session lists. When the owning connection is subsequently tor...
CVE-2026-68476
A flaw was found in the Linux kernel's IP Virtual Server IPVS module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service DoS by crashing the system or...
Security update for openssh8.4
This update for openssh8.4 fixes the following issues: CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files bsc1271044. CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument bsc1271048. CVE-2026-59998: sshd:...
CVE-2026-74433
A flaw was found in the Linux kernel's rxrpc component, specifically within the rxgkissuechallenge function. This Use-After-Free UAF vulnerability occurs because a memory page containing challenge content is prematurely freed before a tracepoint invocation, causing a pointer to reference freed...