CVE-2026-72405

A flaw was found in the Linux kernel's UDP tunnel networking component. A race condition in the udptunnelnicdevicesync function allows a work item to be double-queued. This can lead to a use-after-free vulnerability, where memory is prematurely freed while still active. A local attacker could...

CVE-2026-72443

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA USB audio driver. During the handling of MIDI 2.0 input Universal Serial Bus USB Request Blocks URBs, a setup failure can lead to a use-after-free vulnerability. This allows a local attacker, or a malicious USB device, ...

CVE-2026-72431

A flaw was found in the Linux kernel. A vulnerability exists in the /proc/allocinfo feature where the system may attempt to access memory after it has been freed, known as a use-after-free. This can happen when a kernel module is unloaded while the system is still processing information from...

CVE-2026-74501

A flaw was found in the ALSA USB audio driver of the Linux kernel. A malicious USB MIDI 2.0 device can trigger a use-after-free vulnerability by causing a creation failure after an endpoint is registered. This can lead to a slab use-after-free read when the Universal MIDI Packet UMP node is...

CVE-2026-72393

A flaw was found in the Linux kernel's fbnic Ethernet driver. When the fbnictxlso function reallocates a socket buffer skb, it fails to update a cached pointer to shared information. This can lead to a use-after-free vulnerability, where the driver attempts to access memory that has already been...

CVE-2026-72475

A flaw was found in the Linux kernel's dma-axi-dmac component. This vulnerability arises from the improper freeing of a data structure within the axidmacprepperipheraldmavec function. This oversight could lead to memory corruption, potentially causing system instability or a denial of service...

CVE-2026-72354

A flaw was found in the Linux kernel's NTFS file system driver. A local attacker could trigger a use-after-free vulnerability during Master File Table MFT writeback operations. This occurs due to a timing issue where memory is freed while still being accessed, which can lead to a system crash,...

CVE-2026-72353

A flaw was found in the Linux kernel's NTFS file system driver. A use-after-free vulnerability exists in the ntfsattrfallocate function, where a runlist element is accessed after its memory has been deallocated by a concurrent operation. A local attacker could exploit this to trigger a system...

CVE-2026-72449

A flaw was found in the Linux kernel's drm/amdkfd component. An unprivileged render-group user can exploit this vulnerability via /dev/kfd by repeatedly calling AMDKFDIOCCRIUOP. This leads to a use-after-free and double-free condition due to improper list handling during cleanup. Successful...

CVE-2026-74569

A flaw was found in the Linux kernel's netfilter Session Initiation Protocol SIP connection tracking module nfconntracksip. A remote attacker could send specially crafted SIP messages that cause an integer overflow during Network Address Translation NAT rewrite delta calculations. This overflow...

CVE-2026-72476

A flaw was found in the dmaengine component of the Linux kernel. This flaw occurs in the dmareleasechannel function due to an incorrect order of operations, where a channel's reference count is decremented before verifying if the device is still in use. This can lead to a use-after-free...

CVE-2026-74488

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. When parsing Tunneled Direct Link Setup TDLS frames within an Aggregated MAC Service Data Unit A-MSDU, the driver incorrectly uses the length of the parent frame instead of the subframe. This error can lead to a use-after-free...

Exploit for Use After Free in Google Android

Bad Binder for markw Adapted with Deepseek V4 Flash Make for...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

OPENSUSE-SU-2026:21594-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-76 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935: Privilege escalation in the DOM: Networking component...

USN-8563-3 nginx vulnerability

USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly...

CVE-2026-76045

A flaw was found in WebGL in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a high-severity security risk...

CVE-2026-74320

A flaw was found in the fbdev: sm501fb component of the Linux kernel. The code responsible for obtaining frame buffer mode information from Open Firmware OF binding contains multiple memory handling errors. These include use-after-free vulnerabilities, buffer overruns when writing mode strings...

Internet-Explorer-UAF

Questo repository non contiene un README...

CVE-2026-74369

A flaw was found in the Linux kernel's liveupdate component. This use-after-free vulnerability occurs due to an incorrect order of operations when managing file handler modules. Specifically, the system attempts to access module operations after the module's reference count has been decremented,...