CVE-2026-82418

IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability...

CVE-2026-121181

An use after free flaw was found in the Editing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936269...

CVE-2026-121044

An use after free flaw was found in the Layout component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568832157...

CVE-2026-121080

An use after free flaw was found in the Codecs component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568818122...

CVE-2026-121185

An use after free flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565681453...

CVE-2026-121179

An use after free flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936263...

CVE-2026-121083

An use after free flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567321055...

Updated minetest package fixes security vulnerabilities

The client mesh loaders suffer from memory safety issues including unbounded out-of-bounds heap writes and use-after-free, which might be used to obtain arbitrary code execution on the client. High Installing content from an untrusted ContentDB instance can result in remote code execution. Modera...

CVE-2026-121961

FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A malicious target server can repeatedly send CREATEREQUESTPDU for an active channel id, racing front DATA handling to free a borrowed context and crash the...

CVE-2026-121963

FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closing the channel with queued audio PDUs. Attackers can send a training PDU then close the channel so the playback threa...

CVE-2026-121955

FreeRDP before 3.32.2 contains a use-after-free vulnerability in EmulateSCardReleaseContext that frees the emulated SCardContext before its worker thread is cancelled and joined. A malicious server can send ESTABLISHCONTEXT, a long-timeout GETSTATUSCHANGE, then RELEASECONTEXT smartcard IRPs to...

CVE-2026-121957

FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics handler against the planar bitmap decoder. Attackers can send ResetGraphics while concurrently sending compressed bitmaps of 32 bpp or more t...

CVE-2026-121953

FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a duplicate-name channel with a new ChannelId overwrites the listener's single callback slot, which rdpgfxonclose frees without clearing. A malicious RDP server can open and close such a channel, then send ...

CVE-2026-99246

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication subsystem. A race condition occurs when tracing link reset events without proper locking, which can cause link data to be freed while it is actively being accessed. An unauthenticated remote attacker could exploit...

CVE-2026-121217

An use after free flaw was found in the Streaming component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/500600456...

CVE-2026-121963

FreeRDP versions prior to 3.32.2 are vulnerable to a use-after-free flaw within the asynchronous dynamic rdpsnd channel. The root cause occurs when a malicious RDP server sends a training PDU and subsequently closes the channel with queued audio PDUs, causing the playback thread to read a freed c...

CVE-2026-121963 FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close

FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closing the channel with queued audio PDUs. Attackers can send a training PDU then close the channel so the playback threa...

EUVD-2026-116963

FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closing the channel with queued audio PDUs. Attackers can send a training PDU then close the channel so the playback threa...

EUVD-2026-116961

FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A malicious target server can repeatedly send CREATEREQUESTPDU for an active channel id, racing front DATA handling to free a borrowed context and crash the...

CVE-2026-121961

FreeRDP versions before 3.32.2 are vulnerable to a use-after-free condition in the freerdp-proxy DRDYNVC tracker during drdynvc channel interception. The root cause is a race condition where a malicious target server can repeatedly send CREATE_REQUEST_PDU for an active channel ID, racing the fron...