CVE-2026-55318

CVE-2026-55318 is a critical use-after-free vulnerability in the IP Multimedia Subsystem (IMS) component of Google Pixel devices , caused by a race condition in multiple locations. The flaw enables remote code execution without additional execution privileges or user interaction. It is classified...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red...

DEBIAN-CVE-2026-91947

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-fre...

CVE-2026-91947

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-fre...

CVE-2026-77972

Time-of-check Time-of-use TOCTOU Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the HTTP clients the library ships receive t...

CVE-2021-3899_PoC

CVE-2021-3899 PoC Reproduce 0. Install an older version of apport: sudo apt-get install apport=2.20.11-0ubuntu27 any version apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0 But this pid could be re-used just after apport launched. In such case,...

EUVD-2026-78676

Time-of-check Time-of-use TOCTOU Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the HTTP clients the library ships receive t...

CVE-2026-77972 safeurl validated address is not bound to the request, allowing DNS rebinding

Time-of-check Time-of-use TOCTOU Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the HTTP clients the library ships receive t...

CVE-2026-91947 FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-fre...

CVE-2026-91947 FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-fre...

EUVD-2026-78804

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. Authenticated clients can race AUDIN channel closure messages against DRDYNVC data parsing to trigger heap-use-after-fre...

CVE-2026-91947

FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser , where a channel pointer is dereferenced after its synchronization lock is released. An authenticated client can trigger a heap-use-after-free by racing AUDIN channel closure messages against DRDYN...

Logitech-G-Cloud-GhostLock-CVE-2026-43499

Logitech G Cloud · GhostLock CVE-2026-43499 Root Attempt Logitech G Cloud — CVE-2026-43499 GhostLock Root Attempt ⚠️ For research and defensive purposes only All content in this repository is generated by DeepSeek AI , for security research, vulnerability analysis, and defensive security assessmen...

CVE-2026-92050

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

DEBIAN-CVE-2026-92042

Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92042

Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

Security Bulletin: Multiple Security Vulnerabilities in IBM WebSpheere Application Server affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerabilities Vulnerability Details CVEID:CVE-2026-3621 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to...

CVE-2026-92050

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92050

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92050 Sandbox escape due to race condition in the XPConnect component

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...