CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – Rust 不安全 Web 服务器中的释放后使用 程序代码（Rust） root@kitploit: // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer data: Vec, impl SharedBuffer fn new -...

CVE-2026-85893

Microsoft Edge (Chromium-based) contains a use-after-free vulnerability that allows an unauthorized attacker to achieve elevation of privileges over a network. The CVSS 3.1 base score is 8.8 (High) , with an attack vector of network, low complexity, no required privileges, but user interaction is...

CVE-2026-91724

A flaw was found in Chromium. This use-after-free vulnerability in the Input component allows a remote attacker, who has compromised the renderer process, to potentially execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a crafted HTML page, leading to a...

CVE-2026-91747

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive cross-origin data...

CVE-2026-91736

A flaw was found in Chromium. This use-after-free vulnerability in the Document Object Model DOM allows a remote attacker to execute arbitrary code within the sandbox. By enticing a user to visit a specially crafted HTML page, the attacker can exploit this flaw, leading to unauthorized code...

cve-2018-8389

jscript.dll - ActiveXObject BSTR - 释放后使用 漏洞 在内存被释放后引用它可能导致程序崩溃、使用意外值或执行代码。 漏洞描述 Internet Explorer 的脚本引擎处理内存中对象的方式存在一个远程代码执行漏洞。该漏洞可能以这样一种方式破坏内存，使攻击者能够在当前用户的上下文中执行任意代码。成功利用此漏洞的攻击者可以获得与当前用户相同的用户权限。如果当前用户使用管理用户权限登录，成功利用此漏洞的攻击者可以控制受影响的系统。攻击者随后可以安装程序；查看、更改或删除数据；或创建拥有完全用户权限的新帐户。 CVE ID CVE-2018-8389 供应商...

CVE-2026-91745

A flaw was found in chromium-browser. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2021-30573-PoC-Google-Chrome

CVE-2021-30573-PoC-Google-Chrome Vulnerabilidad Use After Free en Google Chrome reportada por el equipo S4E Recompensa total de Bug Bounty: $6.000 Esto es una Prueba de Concepto para: Gravedad de Seguridad de Google CVE ALTA CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Entrada del blog d...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — CVE-2026-43499 PoC（Qualcomm 4.19 内核） 利用 CVE-2026-43499 实现的本地权限提升——这是一个 rtmutex removewaiter 缺陷，会让 struct rtmutexwaiter 悬挂在等待者的内核栈上（kernel/locking/rtmutex.c，CWE-416 释放后使用）。改编自 NebuSec/CyberMeowfia（IonStack/CVE-2026-43499，Apache-2.0），适用于 Qualcomm Android 4.19.x 厂商内核系列。...

cve-2017-7117

cve-2017-7117 关于漏洞 一个类型混淆和 UAF（释放后使用）漏洞，存在于 iOS 10.3.4 及更早版本，以及 Safari 11.0 之前。 CVE-2017-7117：mitre.org 原始概念验证 由 @lokihardt 发现，来源：Google Project Zero root@kitploit: function f let o = ; for let i in xx: 0 // i is a String for i of 0 // i is now a number, but JIT treats as String printoi; // whoop...

DEBIAN-CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...