CVE-2026-56177

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-74026

In kvmiommumapsg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58846

A use-after-free vulnerability exists in the kvm_iommu_map_sg function of iommu.c in the Android/Linux kernel, caused by a missing permission check . An attacker with local privileges (no user interaction required) can exploit this to achieve local privilege escalation with full impact on confide...

CVE-2026-28668

In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73995

In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28668

CVE-2026-28668 is a use-after-free vulnerability in the LimitRealloc function of malloc_limit.cpp , caused by a logic error. It affects Android and is tracked in the September 2026 Android Security Bulletin (ASB-A-501541998). An attacker with low local privileges and no user interaction can explo...

EUVD-2026-73957

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28604

CVE-2026-28604 is a use-after-free vulnerability in the adbd (Android Debug Bridge Daemon) component of Android, caused by a race condition in multiple locations. It permits remote code execution with no additional privileges and no user interaction. Affected versions include Android 13, 14, 15, ...

CVE-2026-28604

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73951

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28594

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28594

CVE-2026-28594 is a use-after-free vulnerability in the Android Framework component, caused by a logic error present in multiple locations. It enables local privilege escalation without requiring additional execution privileges or user interaction, rated CVSS 7.8 (High) . The affected AOSP versio...

EUVD-2026-73916

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

CVE-2026-83997

CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to achieve remote code execution over the network. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vecto...

CVE-2026-83968

CVE-2026-83968 is a use-after-free vulnerability in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (High) with impacts to confidentiality, integrity, and availability all rated High. CISA's SSVC assessment indicates no kn...

EUVD-2026-73901

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72965

CVE-2026-72965 is a use-after-free vulnerability in the Windows WebClient Service that allows an authorized local attacker to achieve privilege elevation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring low privileges an...

EUVD-2026-73894

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73892

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

CVE-2026-69530

CVE-2026-69530 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized, remote attacker to execute code over a network. The vulnerability is rated CVSS 8.1 (HIGH) with an attack complexity of high , requiring no privileges or user ...