CVE-2026-15222

The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.2.8. This is due to the software...

Exploit for Use After Free in Linux Linux_Kernel

Research on KernelSU Root during the Operation of Honor MagicP...

Exploit for CVE-2026-96889

CVE-2026-96889 — Image Optimization SVG → librsvg use-after-fr...

Vulnerabilities found in IBM DataPower Gateway and its underlying components

IBM has addressed several security issues in DataPower Gateway versions 10.5 through 11.0, along with numerous underlying components. The vulnerabilities involve a wide range of problems, such as use-after-free bugs, race conditions, buffer overflows, null pointer dereferences, integer overflows,...

CVE-2026-109191

The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.0 via the 'imagehubapikeys 6 options' parameter. This makes it possible for authenticated attackers, with...

EUVD-2026-102645

The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.0 via the 'imagehubapikeys 6 options' parameter. This makes it possible for authenticated attackers, with...

curl: OpenSSL provider OSSL_LIB_CTX used after free via the connection shutdown list (CVE-2026-80229 fix incomplete)

Summary: The CVE-2026-80229 fix 7ea37abc6a, 8.22.0 only marks provider connections connclose, but a closed TLS connection is handed to the multi handle's shutdown list lib/conncache.c:242 and outlives its easy handle, while curleasycleanup frees the handle's OSSLLIBCTX osslprovidercleanup,...

EUVD-2026-102510

Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-102512

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-102515

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-102518

Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CLSA-2026-1791120339 tigervnc: Fix of 2 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes in the bundled xorg-x11-server source - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow in the bundled xorg-x11-server source - CVE-2026-55999: fix heap buffer overflow in...

CLSA-2026-1790608489 tigervnc: Fix of 2 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes in the bundled xorg-x11-server source - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow in the bundled xorg-x11-server source - CVE-2026-55999: fix heap buffer overflow in...

MiracleLinux 8 : ghostscript-9.27-19.el8_10 (AXSA:2026-2079:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2079:03 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

CVE-2026-57446: Double Free

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful MMS ObtainFile operation closes MmsObtainFileTask::fileHandle but leaves the stale non-NULL value in a task marked...

SUSE SLES15 Security Update : iperf (SUSE-SU-2026:4678-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4678-1 advisory. - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131757 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64mmcontextput without holding ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131742 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in smctcpsynrecvsock Syzkaller reported a panic in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131731 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the...

Linux kernel Function Use-After-Free

The vulnerability of the managdcreatemanawqcq function in the drivers/net/ethernet/microsoft/mana/gdmamain.c file of the Linux kernel is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...