EUVD-2026-69733

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

EUVD-2026-69710

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2019-14040

CVE-2019-14040 Proof-of-concept code for CVE-2019-14040 More details about the vulnerability are available in the blog post. If you have any questions, you are welcome to DM me on Twitter @tamirzb. Build & Run In order to build, run Android NDK's ndk-build. In order to run the PoC, run the binary...

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84347

A flaw was found in WebRTC, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to potential compromise of the affected system...

CVE-2026-84349

An use after free flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=537105664...

linux-kernel-exploits

linux-kernel-exploits Introduction linux-kernel-exploits Vulnerability List CVE Description Kernels CVE–2018–18955 mapwrite in kernel/usernamespace.c allows privilege escalation Linux kernel 4.15.x through 4.19.x before 4.19.2 CVE–2018–1000001 glibc glibc 2.6.22 released in 2007 CVE-2016-2384 a...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free in Safari Infoleak Exploit - leak an address of a JSObject Tested on webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz Original PoC by Google Project Zero:...

CVE-2026-42978-PoC-Research

CVE-2026-42978 PoC & Research — Windows Push Notifications Use-After-Free Race condition in Windows Push Notifications service WpnService that runs as NT AUTHORITY\SYSTEM. An attacker with local access can trigger a use-after-free during platform shutdown and potentially elevate privileges. CVE:...

CVE-2026-84350

CVE-2026-84350 is a use after free vulnerability in the TabStrip component of Google Chrome , rated Low severity by Chromium. A remote attacker leveraging social engineering could exploit it via UI Interaction to execute arbitrary code outside the browser sandbox . The fix ships in 152.0.7977.75 ...

CVE-2026-84333

CVE-2026-84333 is a use after free vulnerability in Dawn , a graphics component of Google Chrome on Android prior to version 152.0.7977.75 . The flaw allowed a remote attacker to execute arbitrary code outside the sandbox by serving a crafted HTML page. Google assigned it a High Chromium security...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84347

CVE-2026-84347 is a use-after-free vulnerability in the WebRTC component of Google Chrome prior to 152.0.7977.75 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the browser sandbox. The Chromium project assigned this a Medium security severity. The bug ...

CVE-2026-84349

CVE-2026-84349 is a use-after-free in the Browser component of Google Chrome prior to version 152.0.7977.75 (Linux) / 152.0.7977.75/.76 (Windows, Mac). A remote attacker who had already compromised the renderer process could exploit this flaw via a crafted HTML page to execute arbitrary code outs...

CVE-2026-84324

A use-after-free vulnerability in the Proxy component of Google Chrome prior to version 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic . The Chromium project rated this High severity. The bug was reported by Google on 2026-07-10 a...

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84352

CVE-2026-84352 is a use-after-free vulnerability in the WebGL component of Google Chrome on Android , affecting versions prior to 152.0.7977.75 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code outside the browser sandbox . The Chromium security team rates the s...