192511 matches found
CVE-2026-109741: Use After Free
Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109765: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109752: Use After Free
Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-19938: Use After Free
The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...
CVE-2026-19940: Use After Free
The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfpag.c keeps its struct bthfpag objects in a static pool indexed by ACL connection index. On link teardown, hfpagdisconnected cancels ag-txwork and the per-call work items and then clears...
PT-2026-112678
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Advanced Local Procedure Call ALPC mechanism allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs...
CVE-2026-108458: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-108465: Use After Free
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally...
CVE-2026-108461: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105722: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-108464: Use After Free
Use after free in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...
CVE-2026-106175: Double Free
A Double Free vulnerability CWE-415 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions,...
CVE-2026-108468: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-105725: Use After Free
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally...
PT-2026-113541
Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet retransmit or malicious is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to ifa...
PT-2026-111887
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88134: Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-113140
Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A use after free issue in Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory...