CVE-2026-18710

CVE-2026-18710 affects a MongoDB driver component. It could write sensitive configuration data, including an outbound-connection credential, to application logs in cleartext during normal client initialization. This requires log access to recover the credential. The impact is limited to confident...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

CVE-2025-48593

In btahfclientcbinit of btahfclientmain.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48593

A use-after-free vulnerability exists in the bta_hf_client_cb_init function of bta_hf_client_main.cc within the Android Bluetooth subsystem. This flaw is triggered when a phone responds with an error during SDP discovery , causing a tSDP_DISCOVERY_DB to be freed while a dangling pointer remains i...

The vulnerability of the hns3_client_init() function in the drivers/net/ethernet/hisilicon/hns3/hns3_enet.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a service failure.

The vulnerability of the hns3clientinit function in the drivers/net/ethernet/hisilicon/hns3/hns3enet.c file of the Linux Ethernet network adapter support driver relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a system failure...