CVE-2026-80681

A flaw was found in the Linux kernel's vxlan component. A use-after-free vulnerability exists due to improper handling of the Ethernet header pointer after routeshortcircuit is called. When pskbmaypull reallocates the skb-head, the previously cached Ethernet header pointer becomes stale, leading ...

CVE-2026-80622

A flaw was found in the Linux kernel's tlclk driver. This vulnerability occurs due to improper module cleanup, where the driver can be unloaded while user-space processes are still active, and memory is freed prematurely. This can lead to a use-after-free condition and race conditions. A local...

CVE-2025-38001

CVE-2025-38001 دراما عائلة RBTree Linux HFSC Eltree Use-After-Free - إثبات المفهوم PoC لدبيان 12 يستخدم إثبات المفهوم هذا هجومًا على مستوى الصفحات يعتمد على البيانات فقط استنادًا إلى تحويلات RBTree لاختراق النظام. الاستغلال قابل للنقل ويعمل على جميع مثيلات kernelCTF LTS 6.6.90, COS 109, COS 105...

io_uring-n-day

CVE-2024-0582 PoC يحتوي هذا المستودع على إثبات مفهوم لـ CVE-2024-0582 استخدام بعد التحرير على مستوى الصفحة في iouring المستخدم في البحث الأكاديمي. يتضمن تكوين النواة، ونصوص بناء وتشغيل لبيئة QEMU قابلة للتكرار، والثغرة التجريبية المستخدمة في تحليلي. استخدم هذا الكود فقط في بيئة مختبرية محكومة. لا...

CVE-2019-0888

CVE-2019-0888 PoC pour CVE-2019-0888 - Use-After-Free dans Windows ActiveX Data Objects ADO Analyse : https://news.sophos.com/en-us/2019/07/09/cve-2019-0888-use-after-free-in-windows-activex-data-objects-ado/...

CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — qui a mis des pointeurs dans mon wasm Chaîne d'exploitation proof-of-concept pour CVE-2026-15718 , une erreur de compilation par absence de sync dans le compilateur baseline WebAssembly de Mozilla SpiderMonkey composant « JavaScript: WebAssembly ». Un unique array.fill sans...

cve-2018-8611

Exploit d'élévation de privilèges CVE-2018-8611 KTM UAF Ceci est mon exploit PoC d'élévation de privilèges pour CVE-2018-8611, J'ai écrit cet exploit en étudiant le cours ost2 d'exploitation du noyau Windows J'ai vraiment apprécié le cours et la manière dont il adopte une approche étape par étape...

kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect()

A flaw was found in the Linux kernel, specifically within its Bluetooth Synchronous Connection-Oriented SCO component. This vulnerability occurs due to race conditions when multiple connection attempts are made simultaneously on the same Bluetooth socket. This can lead to a use-after-free error,...

android-kernel-exploitation-lab

مختبر استغلال نواة الأندرويد يرشدك هذا المختبر من خلال إعداد بيئة لاستكشاف CVE-2019-2215، وهي ثغرة حرجة في نواة الأندرويد في نظام binder الفرعي. التوثيق إعداد البيئة رفع الامتيازات النواة باستخدام سكريبت gdb الفحص العشوائي باستخدام syzkaller الفحص العشوائي باستخدام AFL++ التفاصيل التقنية:...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

Important: Red Hat Security Advisory: nodejs24 security, bug fix, and enhancement update

An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: nodejs22 security update

An update for nodejs22 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

CVE-2026-57585

A flaw was found in MessagePack for Python, a serializer implementation. This vulnerability, categorized as a Use-After-Free CWE-416, occurs when the Unpacker component is reused after an error. A remote attacker could exploit this by repeatedly providing untrusted input, leading to an...

CVE-2026-80642

A flaw was found in the Linux kernel's liveupdate subsystem. This vulnerability arises from improper reference counting of incoming File-Lifecycle-Bound FLB data. A subsystem might hold onto FLB data for an extended period, and without proper reference counting, the FLB structure could be...

CVE-2026-80676

A flaw was found in the Linux kernel's Hyper-V hv VMBus driver. When a driver is being initialized, a specific callback function attempts to access a memory region driveroverride without proper synchronization. This oversight can lead to a Use-After-Free UAF vulnerability, where a local attacker...

CVE-2026-80619

A flaw was found in the AppArmor security module of the Linux kernel. The aareplaceprofiles function was susceptible to a use-after-free UAF vulnerability. This occurred because the function accessed data after it had been deallocated, potentially allowing an attacker to cause a denial of service...

CVE-2026-80654

A flaw was found in the Linux kernel. An incorrect condition check during the cleanup of a mailbox receive channel in the soc: xilinx component allows the channel to remain active and receive messages even after the device has been removed. This oversight leads to a use-after-free vulnerability,...

CVE-2026-80600

A flaw was found in the batman-adv module of the Linux kernel. This vulnerability occurs because the pskbmaypull function, when called by batadvgetvid, can reallocate a buffer. This causes variables to point to the previously freed memory, leading to a use-after-free condition. A local attacker...

OPENSUSE-SU-2026:21135-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 149.0.7827.155 boo1268373: CVE-2026-12437: Use after free in WebShare CVE-2026-12438: Inappropriate implementation in WebView CVE-2026-12439: Use after free in Digital Credentials CVE-2026-12440: Use after free i...