123787 matches found
CVE-2026-28668
CVE-2026-28668 is a use-after-free vulnerability in the LimitRealloc function of malloc_limit.cpp , caused by a logic error. It affects Android and is tracked in the September 2026 Android Security Bulletin (ASB-A-501541998). An attacker with low local privileges and no user interaction can explo...
EUVD-2026-73957
In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28604
CVE-2026-28604 is a use-after-free vulnerability in the adbd (Android Debug Bridge Daemon) component of Android, caused by a race condition in multiple locations. It permits remote code execution with no additional privileges and no user interaction. Affected versions include Android 13, 14, 15, ...
CVE-2026-28604
In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-73951
In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28594
In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28594
CVE-2026-28594 is a use-after-free vulnerability in the Android Framework component, caused by a logic error present in multiple locations. It enables local privilege escalation without requiring additional execution privileges or user interaction, rated CVSS 7.8 (High) . The affected AOSP versio...
EUVD-2026-73916
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-83997
CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to achieve remote code execution over the network. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vecto...
CVE-2026-83968
CVE-2026-83968 is a use-after-free vulnerability in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (High) with impacts to confidentiality, integrity, and availability all rated High. CISA's SSVC assessment indicates no kn...
EUVD-2026-73901
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73894
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72965
CVE-2026-72965 is a use-after-free vulnerability in the Windows WebClient Service that allows an authorized local attacker to achieve privilege elevation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring low privileges an...
EUVD-2026-73892
Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...
CVE-2026-69530
CVE-2026-69530 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized, remote attacker to execute code over a network. The vulnerability is rated CVSS 8.1 (HIGH) with an attack complexity of high , requiring no privileges or user ...
EUVD-2026-73884
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83940
CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...
CVE-2026-81954
CVE-2026-81954 is a use-after-free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction and no prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) , reflecting full impact on confidentiality, integrity, and a...