117138 matches found
CVE-2026-72336
A flaw was found in the Linux kernel's Bluetooth 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks component. A race condition exists where an L2CAP Logical Link Control and Adaptation Protocol connection is accessed after its protection is dropped, allowing it to be deallocated...
CVE-2026-72335
A flaw was found in the Linux kernel's Bluetooth Management MGMT component. A use-after-free vulnerability exists in the advertisement monitor add failure cleanup process. This occurs because an advertisement monitor object is prematurely freed while a subsequent management routine attempts to...
CVE-2026-72329
A flaw was found in the net/liquidio component of the Linux kernel. The Single Root I/O Virtualization SR-IOV enable path incorrectly cached Virtual Function VF pcidev pointers. This improper handling of references could lead to a use-after-free vulnerability when the cached pointer is later...
CVE-2026-72328
A flaw was found in the Linux kernel's accel/amdxdna component. A race condition exists where the aie2populaterange function can attempt to use an amdxdnaumap object that is simultaneously being released. This concurrent access may lead to a use-after-free vulnerability, which could result in...
CVE-2026-72322
A flaw was found in the Linux kernel's IPv6 multicast mcast component. A race condition exists during the teardown of a network device and the processing of incoming Multicast Listener Discovery MLD queries. This can lead to a Use-After-Free UAF vulnerability, where memory is accessed after it ha...
CVE-2026-72317
A flaw was found in the Linux kernel's SUN Remote Procedure Call SUNRPC implementation. A use-after-free vulnerability exists in the Transport Layer Security TLS connection path. When a TLS handshake fails, the client resource can be prematurely freed, leading to a subsequent attempt to access th...
CVE-2026-72323
A flaw was found in the Linux kernel. A race condition exists between network device teardown and Internet Group Management Protocol IGMP query processing. This can lead to a Use-After-Free UAF vulnerability in the igmpgqstarttimer function, which could allow an attacker to trigger a kernel panic...
CVE-2026-76040
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-76045
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76045
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-76040
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-72299
A flaw was found in the TIPC Transparent Inter-Process Communication component of the Linux kernel. When tipcskenqueue tracepoints are active and a socket is owned by a user, the system may attempt to access already freed or dequeued socket buffers. This can lead to a kernel crash, resulting in a...
SUSE-SU-2026:23244-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command...
SUSE-SU-2026:23241-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command...
CVE-2026-38753
A flaw was found in Busybox. A use-after-free vulnerability in the awksub function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted AWK script. This can lead to the unavailability of the Busybox service. Mitigation Mitigation for this issue is either not...
EUVD-2026-61237
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76045
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76045
CVE-2026-76045 is a use after free vulnerability in WebGL in Google Chrome prior to 151.0.7922.169 . A remote attacker can execute arbitrary code inside the sandbox via a crafted HTML page. The Chromium security severity is High , with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R). The vulne...
