pillow: pillow: Denial of service via double free during image transformation

A flaw was found in Pillow. A remote attacker who can submit large image transformation operations under memory pressure can trigger improper error handling, leading to a double-free vulnerability releasing the same memory block twice. This issue can result in an application crash, causing a Deni...

CVE-2026-85890

Double free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-113122

Double free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-85890

A double free vulnerability exists in Microsoft Edge (Chromium-based) , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is present in versions prior to 155.0.4283.62 . While specific technical root causes or internal components are not...

libxml2: double-free/UAF in libxml2 Python bindings

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

CVE-2026-90001

A flaw was found in the Linux kernel's HID Human Interface Device BPF Berkeley Packet Filter component. A race condition exists between the device destruction and BPF link release paths, which can lead to a struct hiddevice being freed twice. This double-free vulnerability results in a...

CVE-2026-99206

A flaw was found in the Linux kernel's iSCSI target subsystem. A race condition occurs when concurrent processes update discovery authentication parameters through the configuration filesystem configfs without proper locking. A local user could exploit this vulnerability to trigger a double-free...

CVE-2026-93221

A flaw was found in the Linux kernel's NFS daemon nfsd. A race condition occurs when multiple internal processes concurrently access the graceended flag without proper synchronization. This can lead to memory corruption, including double-free vulnerabilities and attempts to read from freed memory...

CVE-2026-98963

A flaw was found in the Btrfs file system within the Linux kernel. During asynchronous read operations, an early I/O error can cause both the direct and deferred error handling paths to release the same resources. This double-free condition can be exploited by a local user to corrupt memory and...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

CVE-2026-85890: Microsoft Microsoft Edge (Chromium-based): Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Alibaba Cloud Linux 3 : 0328: golang (ALINUX3-SA-2026:0328)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0328 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-111943: On most platforms, Go use...

MiracleLinux 8 : xorg-x11-server-1.20.11-28.el8_10.5 (AXSA:2026-2200:20)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2200:20 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server:...

AlmaLinux 9.2 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793286310)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793286310 advisory. - A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to...

CVE-2026-99150

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpugpr amdgpudebugfsgprread drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which...

CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecfurlvaluesreaddata that allows attackers to corrupt heap memory via crafted partial URL records. Attackers can supply a crafted MSIE cache index.dat file whose recovered partial record has an oversized unknownoffset...

AZL-111371 CVE-2026-99206 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

CVE-2026-99206 scsi: target: iscsi: Fix race in discovery auth updates

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

CVE-2026-99206

A double-free vulnerability exists in the Linux kernel within the scsi: target: iscsi component. The issue is caused by a race condition where separate configfs opens can concurrently update the discovery AuthMethod parameter. This concurrency allows both callers to free the same value within the...