CVE-2026-56906

A use-after-free vulnerability exists in the ep_free function of eventpoll.c , caused by a race condition . Additionally, memory corruption via use-after-free was identified in ep_get_upwards_depth_proc within fs/eventpoll.c . This flaw could allow for local escalation of privilege without requir...

EUVD-2026-93787

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55330

A use-after-free vulnerability exists in the BluetoothCccHandlerCallbackImpl function within the bluetooth_ccc.cc file due to a logic error. This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. While the specific...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93786

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Afectado: Apache HTTP Server 2.4.66 con modhttp2 + Event MPM Corregido en: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 ALTA — Posible ejecución remota de código no autenticado CWE: CWE-415 Double Free ¿Cuál es la vulnerabilidad modhttp2 en Apache 2.4.66...

bincat

Introducción ¿Qué es BinCAT? BinCAT es un kit de análisis de código binario estático , diseñado para ayudar a los ingenieros inversos, directamente desde IDA o usando Python para automatización. Incluye: análisis de valores registros y memoria análisis de contaminación reconstrucción y propagació...

CVE-2026-23111

Auditor CVE-2026-23111 Linux Kernel nftables UAF Este repositorio contiene un script de auditoría automatizado en Bash diseñado para evaluar de manera profunda y precisa la vulnerabilidad CVE-2026-23111 en entornos Linux. 🔍 ¿Qué es la vulnerabilidad CVE-2026-23111? CVE-2026-23111 es una...

CVE-2019-2215

Bad-Binder CVE-2019-2215 A continuación se muestra el exploit para la vulnerabilidad bad binder CVE-2019-2215 probado en un emulador x86. El objetivo era abusar de la vulnerabilidad UAF para activar una primitiva AAR que filtrara direcciones del kernel y usar una primitiva AAW para sobrescribir...

CVE-2026-80842

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-80837

A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...

CVE-2026-80824

A flaw was found in the Linux kernel's USB subsystem usbfs. An unprivileged local attacker with read/write access to a /dev/bus/usb node could exploit a use-after-free vulnerability. This occurs because the usbdevice structure is prematurely freed before all pending operations are completed...

CVE-2026-80848

A flaw was found in the xfrm: espintcp component of the Linux kernel. A race condition exists during the closure of espintcp sockets, where a memory buffer skb can be freed while still being accessed by another process. This Use-After-Free UAF vulnerability could allow a local attacker to cause...

CVE-2026-80849

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. When a network connection using TCP-AO is re-established with a different server, a timing issue can cause the system to attempt to use memory that has already been released. This 'use-after-free' vulnerabilit...

CVE-2026-80778

A flaw was found in the Linux kernel. A race condition exists in the futex/pi Fast Userspace Mutexes / Priority Inheritance subsystem. When a private futex key borrows a waiter's memory management mm structure without proper referencing, the attachtopiowner function can accept an owner from a...

firefox: Sandbox escape due to use-after-free in the DOM: Navigation component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...

firefox: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...