CVE-2026-106197

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106358

Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106382

A Use after free vulnerability in the Chromecast component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to execute arbitrary code outside the sandbox. The attack can be initiated by navigating to a crafted HTML page . No specific exploit links or details are provid...

CVE-2026-106197

A Use after free vulnerability exists in the Google Chrome browser in versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by navigating the user to a crafted HTML page . While the severity is rated as Critical , no specific exploit li...

CVE-2026-106358

A Use after free vulnerability exists in the Navigation component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by interacting with a crafted HTML page. The security severity is rated as Critical . Remediation is...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93787

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56906

In epfree of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56906

A use-after-free vulnerability exists in the ep_free function of eventpoll.c , caused by a race condition . Additionally, memory corruption via use-after-free was identified in ep_get_upwards_depth_proc within fs/eventpoll.c . This flaw could allow for local escalation of privilege without requir...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93786

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55330

A use-after-free vulnerability exists in the BluetoothCccHandlerCallbackImpl function within the bluetooth_ccc.cc file due to a logic error. This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. While the specific...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Afectado: Apache HTTP Server 2.4.66 con modhttp2 + Event MPM Corregido en: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 ALTA — Posible ejecución remota de código no autenticado CWE: CWE-415 Double Free ¿Cuál es la vulnerabilidad modhttp2 en Apache 2.4.66...

CVE-2026-23111

Auditor CVE-2026-23111 Linux Kernel nftables UAF Este repositorio contiene un script de auditoría automatizado en Bash diseñado para evaluar de manera profunda y precisa la vulnerabilidad CVE-2026-23111 en entornos Linux. 🔍 ¿Qué es la vulnerabilidad CVE-2026-23111? CVE-2026-23111 es una...

CVE-2019-2215

Bad-Binder CVE-2019-2215 A continuación se muestra el exploit para la vulnerabilidad bad binder CVE-2019-2215 probado en un emulador x86. El objetivo era abusar de la vulnerabilidad UAF para activar una primitiva AAR que filtrara direcciones del kernel y usar una primitiva AAW para sobrescribir...

CVE-2026-80842

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-80837

A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...

CVE-2026-80824

A flaw was found in the Linux kernel's USB subsystem usbfs. An unprivileged local attacker with read/write access to a /dev/bus/usb node could exploit a use-after-free vulnerability. This occurs because the usbdevice structure is prematurely freed before all pending operations are completed...