CVE-2026-74746

CVE-2026-74746 is a slab-use-after-free vulnerability in the Linux kernel netfilter flowtable subsystem. The root cause lies in nf_flow_table_iterate(), which treats only original-direction tuple nodes as owning entries. When the original node is published first, the garbage collector can observe...

CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flowoffloadadd is still...

CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

CVE-2026-74743

CVE-2026-74743 affects the Linux kernel's macvlan network driver. Macvlan devices inherit hard_header_len from the underlying device during initialization but leave needed_headroom and needed_tailroom set to zero. When the lower device requires extra headroom or tailroom (e.g., macsec , ipsec , w...

CVE-2026-74743 macvlan: inherit needed_headroom and needed_tailroom from lowerdev

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

CVE-2026-74744

CVE-2026-74744 affects the Linux kernel ipvlan subsystem. During ipvlan_init(), ipvlan devices inherit hard_header_len from the physical device but leave needed_headroom and needed_tailroom set to zero. When the underlying device requires extra space for headers or trailers (e.g., macsec, ipsec, ...

CVE-2026-74743 macvlan: inherit needed_headroom and needed_tailroom from lowerdev

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

CVE-2026-79054

A flaw was found in Chromecast within Google Chrome. This use-after-free vulnerability allows a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page,...

CVE-2026-79052

A flaw was found in Aura, a component within Google Chrome. This vulnerability, known as a 'use-after-free,' occurs when a program attempts to use memory after it has been freed, which can lead to unpredictable behavior. A remote attacker could exploit this by tricking a user into visiting a...

CVE-2026-79047

A flaw was found in chromium-browser. A remote attacker could leverage social engineering to entice a user to visit a crafted HTML page. This could lead to a use-after-free vulnerability in the Views component, allowing the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-79012

A flaw was found in Chromium's Safebrowsing component. A remote attacker could exploit a use-after-free vulnerability by leveraging social engineering to trick a user into visiting a crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-79027

A flaw was found in WebRTC. A remote attacker could exploit a use-after-free vulnerability by sending crafted network traffic. This could allow the attacker to execute arbitrary code within the sandbox environment, leading to potential system compromise...

CVE-2026-79010

A flaw was found in Google Chrome's Network component. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by performing an operation on a resource after it had expired or been released. This could be triggered via a crafted HTML page, allowing th...

CVE-2026-78990

A flaw was found in Compositing in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78945

A flaw was found in chromium-browser. This use-after-free vulnerability in the Views component could allow a remote attacker, through social engineering, to execute arbitrary code outside of the sandbox. This exploitation occurs when a user visits a specially crafted HTML page, leading to potenti...

CVE-2026-78899

A flaw was found in chromium-browser. This use-after-free vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the browser's sandbox. This can occur when a user visits a specially crafted HTML page, potentially leading to system compromise...

CVE-2026-79235

A flaw was found in WebGL within Chromium. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79232

A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to exploit memory corruption by crafting a malicious HTML page. Successful exploitation can potentially lead to arbitrary code execution outside of the browser's security sandbox...

CVE-2026-79219

A flaw was found in Google Chrome's Bluetooth component. This use-after-free vulnerability, a type of memory corruption, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by leveraging social engineering techniques and a specially...