Astra Linux – Vulnerability in glibc

A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the nssgethostbyname2r and nssgetcanonnamer hooks without...

SUSE SLES15 Security Update : kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:2932-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2932-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues The following security issues were fixed: ...

The vulnerability of the ANGLE library in Google Chrome browser allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the ANGLE library in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to bypass the sandboxing protection mechanisms.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing mechanism by using a specially created HTML page...

ROS-20260520-73-0040

A vulnerability in the CSS component of the Google Chrome browser is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code using a specially crafted HTML page...

ROS-20260515-73-0035

A vulnerability in the TextEncoding component of Google Chrome and Microsoft Edge browser is related to memory usage after it has been freed. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service via a specially crafted HTML page as a result of a user...

The vulnerability of Google Chrome browser’s Blink rendering module allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Blink rendering module is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007571 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible UAF when remounting r/o a mmp-protected file system After commit 618f003199c6...

The vulnerability of the UPnP Device Host operating system in Windows allows a hacker to execute arbitrary code.

The vulnerability of the UPnP Device Host operating system in Windows relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the type, atype, and flags attributes in the Libxslt XML analysis library allows a attacker to execute arbitrary code.

The vulnerability of the type, atype, and flags attributes of the Libxslt XML parsing library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

samtools 资源管理错误漏洞

Samtools is an open-source toolkit for processing high-throughput sequencing data. Versions of Samtools prior to 1.21.1 and 1.22 contain a resource management vulnerability. This vulnerability stems from the mpileup command prematurely discarding data, which may lead to the reading of memory that...

EulerOS 2.0 SP13 : grub2 (EulerOS-SA-2026-1210)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string...

ROS-20260128-73-0014

A vulnerability in the hcicmdsyncclear function of the Bluetooth protocol implementation of the Linux operating system kernel is related to memory usage after it has been freed as a result of a race condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2019-2263

Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064...

CVE-2025-68376

In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CSMODESYSFS, if the buffer size is changed and enabled again, currently sysfsbuf will point to the newly allocated memorybufnew and free the old...

ROS-20251217-7321

A vulnerability in the Redis database management system DBMS is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20251216-7365

A vulnerability in the Ozone component of Google Chrome and Microsoft Edge browsers is related to memory usage after it has been freed. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity and availability of protected information...

CVE-2025-66627

CVE-2025-66627 affects Wasmi (WebAssembly interpreter for constrained/embedded systems). The issue is a Use-After-Free in Wasmi’s linear memory implementation triggered under certain memory growth conditions, potentially causing memory corruption, information disclosure, or code execution. Affect...

The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...