JLSEC-2026-1036 ImageMagick: Use-After-Free in crafted 8BIM when identifying an image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51...

JLSEC-2026-1066 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs...

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed. This can be triggered during image processing and may lead to a denial of service...

JLSEC-2026-1054 ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses...

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory...

JLSEC-2026-1063 ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null...

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

JLSEC-2026-1067 ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption...

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution...

CVE-2026-50046

A use-after-free flaw was found in Unbound's DNS-over-TLS DoT forwarded query handling. A remote attacker can exploit a timing error during TLS handshake failures on a server under load to trigger a daemon crash, resulting in a Denial of Service DoS. Mitigation To mitigate this issue, avoid...

CVE-2026-54620

A flaw was found in sqlite3-ruby, a Ruby binding for the SQLite3 embedded database. This vulnerability occurs because callbacks used for SQLite aggregate functions can be prematurely freed while still being referenced during aggregation. A local attacker could potentially exploit this...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499-...

openssh security update

An update is available for openssh. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux,...

RLSA-2026:47757 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux...

RLSA-2026:47755 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux...

openssh security update

An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...

SUSE-SU-2026:3427-1 Security update for valkey

This update for valkey fixes the following issues: - CVE-2026-56684: use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL bsc1272443. - CVE-2026-63639: corrupt stream RDB files containing a shared NACK across consume...

SUSE-SU-2026:23042-1 Security update for gawk

This update for gawk fixes the following issues - CVE-2026-40467: use-after-free in the io.c program file via the dogetlineredir routine bsc1271351. - CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. - CVE-2026-40553: buffer overflow in the extension/readdir.c program fi...

RHSA-2026:47717 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

CVE-2026-64447

A flaw was found in the Linux kernel's ipu7 media driver. This vulnerability involves incorrect memory management where memory can be freed multiple times and subsequently accessed after it has been freed, specifically during error handling paths in device initialization. A local attacker could...

BIT-SQLITE-2026-51304

sqlite 3.41 has a use-after-free UAF vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprListDelete, then attempts to access the nExpr member of the already freed object. This dangling pointer access causes invalid...

BIT-SQLITE-2026-51302

SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a...

BIT-SQLITE-2026-51298

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree, the program still accesses internal member of the freed pointer, which can cause service crash and denial of service...

BIT-SQLITE-2026-51297

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...