CVE-2026-49418

On FreeBSD, calling msync(MS_INVALIDATE) on a mapping of an unmanaged device object leaves invalidated pages in the pager's page list; a subsequent page fault re-inserts them, corrupting the list and causing a double-free on object destruction. An unprivileged local user with memory-mapped I/O ac...

EUVD-2026-62229

When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This corrupts the list, a...

Exploit for CVE-2026-56848

CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 Android arm64 Local Privilege Escalation Adapta...

Linux Distros Unpatched Vulnerability : CVE-2026-76040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-74944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbi...

Linux Distros Unpatched Vulnerability : CVE-2026-74940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1,...

Mozilla Thunderbird < 154.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 154.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-78 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox E...

Mozilla Thunderbird < 153.1

The version of Thunderbird installed on the remote Windows host is prior to 153.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-80 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these...

Mozilla Thunderbird < 153.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-80 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some...

Linux Distros Unpatched Vulnerability : CVE-2026-63639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload th...

Linux Distros Unpatched Vulnerability : CVE-2026-74949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR...

Linux Distros Unpatched Vulnerability : CVE-2026-74973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1...

Linux Distros Unpatched Vulnerability : CVE-2026-74969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1,...

Mozilla Thunderbird < 140.14

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-79 advisory. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Som...

Mozilla Thunderbird < 154.0

The version of Thunderbird installed on the remote Windows host is prior to 154.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-78 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14,...

PT-2026-78316

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A use-after-free issue exists in the kernel during the copying of knotes during a fork operation. A knote with a timer-based filter may fire and be enqueued on t...

Linux Distros Unpatched Vulnerability : CVE-2026-18692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to b...

Oracle Linux 8 : pam (ELSA-2026-56131)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56131 advisory. 1.3.1-40.0.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36272695 1.3.1-40 - pamuserdb: fix password comparison timing leak. Resolves:...

Linux Distros Unpatched Vulnerability : CVE-2026-74936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,...