190522 matches found
UBUNTU-CVE-2026-98374
In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmitskbhint in tcpsendsynack When tcpsendsynack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcprtxqueueunlinkandfree and only repairs...
PT-2026-108007
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free...
PT-2026-107983
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...
Linux Distros Unpatched Vulnerability : CVE-2026-98243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The patch...
PT-2026-107981
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
RHEL 10 : kernel (RHSA-2026:77634)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77634 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fs/notify: call...
ROS-20261008-73-0297
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EulerOS 2.0 SP15 : curl (EulerOS-SA-2026-3903)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability exists in libcurl when an applicationx000D configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS orx00...
ROS-20261008-73-0326
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Fedora 44 : curl (2026-8efcd7a2a0)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8efcd7a2a0 advisory. - fix secure cookie attribute bypass with tab CVE-2026-80255 - fix OpenSSL provider use-after-free CVE-2026-80229 ---- - Fix HTTP/2 server push UAF...
RHEL 9 : python3.14 (RHSA-2026:77021)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77021 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
RHEL 10 : thunderbird (RHSA-2026:77631)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:77631 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM:...
The vulnerability of the Reliable Multicast Transport Driver (RMCAST) for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Security Health Service for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Security Health Service for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Reliable Multicast Transport Driver (RMCAST) for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Samsung Galaxy A57 Android 16 sgpu Driver Use-After-Free
Samsung Galaxy A57 devices running Android version 16 contain a use-after-free race in the sgpu driver’s sgpugemcreate function. The proof of concept races GEM creation and close ioctls to trigger BO swap-list corruption. Samsung sgpu: sgpugemcreate calls sgpuswapaddbo on dangling BO...
FreeBSD : xorg -- Multiple vulnerabilities (06bf834f-c31f-11f1-9b94-901b0e13f1a0)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 06bf834f-c31f-11f1-9b94-901b0e13f1a0 advisory. X.Org reports: Multiple issues have been found in the X server and Xwayland implementations...
Linux Distros Unpatched Vulnerability : CVE-2026-98256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after- free in sendsignallocked+0xb27/0xba0 Write of size 8 at ad...
MiracleLinux 8 : python3.12-3.12.15-2.el8_10 (AXSA:2026-1997:24)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1997:24 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of...