CVE-2026-68150

A flaw was found in the Linux kernel. A local attacker could trigger a double-unlock vulnerability in the filesystem's emergency thaw operation. This occurs when the sumount semaphore is released twice, leading to corruption of the semaphore's internal state. This corruption can cause system...

CVE-2026-68263

A flaw was found in the Linux kernel's drm/imagination component. A double call to the drmschedentityfini function can lead to a reference count underflow and a use-after-free condition. This vulnerability could allow a local attacker to cause a denial of service or potentially achieve arbitrary...

CVE-2026-65780

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-62889

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-62766

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-61366

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

EUVD-2026-56733

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

EUVD-2026-56401

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

EUVD-2026-56377

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

EUVD-2026-56328

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. "Its recovery ecosystem combines the Session messaging network with blockchain-backed services that...

CVE-2026-68416

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When an error occurs during the addition of an MTD device partition, the error handling routines can attempt to free the same memory region twice. This also causes a warning due to the partition node still being linked...

Windows Kerberos Elevation of Privilege Vulnerability

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Windows Network Connection Broker Elevation of Privilege Vulnerability

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

Windows Autopilot Elevation of Privilege Vulnerability

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-68280

A flaw was found in the Linux kernel's drm/bridge: cdns-dsi component. This vulnerability arises from the incorrect use of a deprecated power management function, causing the system to attempt to disable DSI Display Serial Interface clocks twice during suspend operations. This redundant action...

CVE-2026-68236

A flaw was found in the Linux kernel's drm/amd/display component. Specifically, within the dmupdatecrtcstate function, a stream pointer is released but not subsequently set to NULL. This can lead to a double release of the same pointer if an error occurs later in the process, creating a...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...