PT-2026-111445

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5...

PT-2026-113483

Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

Microsoft Windows: CVE-2026-96322: Windows Remote Desktop Protocol Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally...

CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791905425)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791905425 advisory. - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791904140)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791904140 advisory. - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...

Microsoft Windows: CVE-2026-72934: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

KB5126646: Windows Server 2025 Security Update (October 2026)

The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

CVE-2026-100211: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70015: Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69935: Windows Storage Elevation of Privilege Vulnerability

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85811: Network Policy Server (NPS) Remote Code Execution Vulnerability

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...

Microsoft Windows: CVE-2026-70026: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70025: Windows Netlogon Denial of Service Vulnerability

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-70014: Windows Cryptographic Services Remote Code Execution Vulnerability

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69913: Windows TCP/IP Remote Code Execution Vulnerability

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

Alpine Linux: CVE-2026-94453: Use After Free

Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet retransmit or malicious is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to...

PT-2026-112218

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description A use-after-free condition in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when ...

Microsoft Windows: CVE-2026-83739: Windows Bluetooth Service Remote Code Execution Vulnerability

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network...

Security Vulnerabilities fixed in Firefox ESR 115.43 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109706: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a remote attacker to cause a service failure...