Exploit for Use After Free in Linux Linux_Kernel

GhostLock X200 App A one-click root app for vivo X200 d...

libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the xmlParseInternalSubset function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service DoS, making the affected system or application...

Moderate: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2026-82619 Systerel S2OPC subscription_mgr.c use after free

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

EUVD-2026-68359

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

CVE-2026-82619 Systerel S2OPC subscription_mgr.c use after free

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

CVE-2026-82619

Systerel S2OPC versions up to 1.7.3 are affected by a use-after-free vulnerability in the function monitored_item_event_filter_treatment_bs__init_event_filter_ctx_and_result located in src/ClientServer/services/bgenc/subscription_mgr.c. A remote attacker with low privileges can manipulate the Eve...

FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit a heap use-after-free vulnerability when a client connects with asynchronous updates enabled. By sending a specially crafted Window Alternate Secondary Order message, the server can trigger memo...

FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit a heap use-after-free vulnerability when a client connects with asynchronous updates enabled. By sending a specially crafted Window Alternate Secondary Order message, the server can trigger memo...

PT-2026-83717

Name of the Vulnerable Software and Affected Versions valkey-io valkey version 9.1.0 Description A use after free flaw exists in the Blocked-on-keys Subsystem within the handleClientsBlockedOnKey function located in the src/blocked.c file. This issue can be triggered remotely, although the attack...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async CVE-2024-58240 In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AFXDP generic RX path CVE-2025-37920 In t...

ALSA-2026:61386 Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...

RockyLinux 9 : nodejs:22 (RLSA-2026:61383)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61383 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

Linux Distros Unpatched Vulnerability : CVE-2026-26447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then...

Linux Distros Unpatched Vulnerability : CVE-2026-80619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing udata-size after calling aaputloaddataudata, causing a potential...

Linux Distros Unpatched Vulnerability : CVE-2026-80600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which...

Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-064 (ALASFIREFOX-2026-064)

The version of firefox installed on the remote host is prior to 140.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-064 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the...

RockyLinux 9 : nodejs:24 (RLSA-2026:61386)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61386 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

Linux Distros Unpatched Vulnerability : CVE-2026-80661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ufs: core: tracing: Do not dereference pointers in TPprintk The trace events in drivers/ufs/core/ufstrace.h were converted to take a pointer to the hba structur...

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...