PT-2026-79180

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A use-after-free issue exists that could allow a remote attacker to execute arbitrary code. Use-after-free is a memory corruption flaw that occurs when an application...

PT-2026-79125

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A use after free issue in Chromoting allows a remote attacker to execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fl...

Linux Distros Unpatched Vulnerability : CVE-2026-64787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to induce a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

RHEL 9 : kernel (RHSA-2026:57252)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57252 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfconntrackh323: f...

Google Chrome < 151.0.7922.173 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 151.0.7922.173. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0404570826 advisory. - Use after free in DOM in Google Chrome prior to 151.0.7922.173...

CVE-2026-76921 Use After Free in Wireshark

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76921

A use-after-free vulnerability in Wireshark's CMS protocol dissector affects versions 4.6.0–4.6.7 and 4.4.0–4.4.18. A crafted packet triggers the crash, causing denial of service (CVSS 5.5, MEDIUM). No in-the-wild exploitation is reported. Users should upgrade to patched Wireshark releases; see t...

CVE-2026-16851

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free...

CVE-2026-74522

A flaw was found in ksmbd, a component of the Linux kernel. This use-after-free vulnerability occurs when a ksmbd file object is prematurely freed while another session still holds a reference to it. This can lead to the system attempting to access freed memory, potentially causing a system crash...

CVE-2026-74520

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit and IOMMUFD IOMMU File Descriptor components. This vulnerability is a Use-After-Free UAF, which means the system attempts to use memory that has already been released. Specifically, during device detachment or hardwa...

CVE-2026-16851

CVE-2026-16851 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is a use-after-free flaw that allows a remote attacker to trigger a denial of service . The CVSS 3.1 score is 7.4 (HIGH) , with an adjacent network attack vector, low complexity , no privileges required , and change...

EUVD-2026-62746

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free...

CVE-2026-16851 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free...

USN-8563-4: nginx regression

USN-8563-3 fixed a vulnerability in nginx. The fix introduced a regression in certain environments. This update reverts the fix for CVE-2026-42533 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly handled certain...

CVE-2026-74541

A flaw was found in the Linux kernel's Bluetooth ISO subsystem. This vulnerability arises from the system's failure to properly clear isodata when a connection is detached from its host controller connection hcon. A local attacker could exploit this use-after-free condition to cause a denial of...

CVE-2026-74257

A flaw was found in the Linux kernel's sockmap feature. The udpbpfrecvmsg function, responsible for handling message reception, lacks proper serialization for skmsg objects. This allows multiple threads to access and modify the same skmsg object concurrently, resulting in a use-after-free...

CVE-2026-74255

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This use-after-free vulnerability occurs when the tipcdisablel2media function calls synchronizenet before properly invalidating a media pointer. This timing issue allows concurrent readers to access a memo...

CVE-2026-72500

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Broadcom NetXtreme-E bnxtre driver. This use-after-free vulnerability occurs because a specific memory page is released prematurely during the teardown process. A local attacker could exploit this timing issue, potentially...

CVE-2026-74563

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS TCP module. The rdstcpladdrcheck function fails to hold the Read-Copy-Update RCU lock across an IPv6 address check. This allows a race condition where a network device can be freed while still being referenced, leading to a...