CVE-2026-68846

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

CVE-2026-68835

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

CVE-2026-68837

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68825

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-67385

Use after free in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-62813

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-62697

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-62694

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-56172

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-56177

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-74026

In kvmiommumapsg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58846

A use-after-free vulnerability exists in the kvm_iommu_map_sg function of iommu.c in the Android/Linux kernel, caused by a missing permission check . An attacker with local privileges (no user interaction required) can exploit this to achieve local privilege escalation with full impact on confide...

CVE-2026-28668

In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73995

In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28668

CVE-2026-28668 is a use-after-free vulnerability in the LimitRealloc function of malloc_limit.cpp , caused by a logic error. It affects Android and is tracked in the September 2026 Android Security Bulletin (ASB-A-501541998). An attacker with low local privileges and no user interaction can explo...

EUVD-2026-73957

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28604

CVE-2026-28604 is a use-after-free vulnerability in the adbd (Android Debug Bridge Daemon) component of Android, caused by a race condition in multiple locations. It permits remote code execution with no additional privileges and no user interaction. Affected versions include Android 13, 14, 15, ...

CVE-2026-28604

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73951

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28594

CVE-2026-28594 is a use-after-free vulnerability in the Android Framework component, caused by a logic error present in multiple locations. It enables local privilege escalation without requiring additional execution privileges or user interaction, rated CVSS 7.8 (High) . The affected AOSP versio...