132668 matches found
EUVD-2026-73884
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-81954
CVE-2026-81954 is a use-after-free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction and no prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) , reflecting full impact on confidentiality, integrity, and a...
EUVD-2026-73857
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73845
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-80081
CVE-2026-80081 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...
EUVD-2026-73836
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-78525
CVE-2026-78525 is a use-after-free vulnerability in Microsoft Office Outlook that allows an unauthenticated, remote attacker to achieve remote code execution . The CVSS v3.1 base score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning user interaction is required but n...
libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service
A flaw was found in libexpat. The library's handling of custom encoding callbacks lacks proper tracking of handler call depth, which can lead to a use-after-free vulnerability. This memory corruption flaw could allow a local attacker to cause a denial of service or potentially execute arbitrary...
CVE-2026-82063
A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during curso...
CVE-2026-82061
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
CVE-2026-78514
CVE-2026-78514 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e....
EUVD-2026-73819
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-82056
A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been...
CVE-2026-78507
CVE-2026-78507 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior privileges. The CVSS 3.1 score is 8.8 (High) with ...
EUVD-2026-73816
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-69595
CVE-2026-69595 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. Microsoft rated it CRITICAL (CVSS 3.1: 9.8) with low attack complexity and no user interactio...
EUVD-2026-73812
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...
EUVD-2026-73810
Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally...
CVE-2026-78457
CVE-2026-78457 is a use-after-free vulnerability in Windows Security Health Service that enables a locally authenticated attacker to achieve privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user interaction. Imp...