Exploit for CVE-2026-56848

node-cve-2026-56848-check Standalo...

DEBIAN-CVE-2026-112381

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reentrant write-ready callback, a timing-dependent race introduced by the CVE-2021-32564 flow-control backports. This iss...

CVE-2026-112381

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reentrant write-ready callback, a timing-dependent race introduced by the CVE-2021-32564 flow-control backports. This iss...

EUVD-2026-107538

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reentrant write-ready callback, a timing-dependent race introduced by the CVE-2021-32564 flow-control backports. This iss...

CVE-2026-105792

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/taskresult/taskname endpoint calls SessionManager.getresultbytask in ufo/server/services/sessionmanager.py, which acquires a non-reentrant lock and then calls...

EUVD-2026-93420

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/taskresult/taskname endpoint calls SessionManager.getresultbytask in ufo/server/services/sessionmanager.py, which acquires a non-reentrant lock and then calls...

PT-2026-106749

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task result/task name endpoint calls SessionManager.get result by task in ufo/server/services/session manager.py, which acquires a non-reentrant lock and then calls...

CVE-2026-91791

Foxit PDF Editor/Reader is susceptible to an invalid memory read and application crash when processing a specially crafted PDF file. The vulnerability is caused by a reentrant execution condition involving JavaScript triggered by page-visibility events , which leads to the application accessing a...

CVE-2026-91792

Foxit PDF Editor/Reader is vulnerable to a use-after-free condition when processing a specially crafted PDF. The vulnerability is triggered when the application performs reentrant zoom and layout operations through page- and annotation-related JavaScript actions, causing it to access page objects...

EUVD-2026-85158

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript can cause the application to access an annotation object after it has been released, resulting in a use-after-free condition and applicati...

CVE-2026-91816

Foxit PDF Editor/Reader is susceptible to a use-after-free vulnerability in its handling of PDF annotations . The vulnerability is triggered by reentrant annotation deletion initiated through embedded JavaScript , which causes the application to access an annotation object after it has been relea...

CVE-2026-91818 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash...

CVE-2026-91818

A use-after-free vulnerability exists in Foxit PDF Editor/Reader 's JavaScript handling of PDF annotations. The root cause is reentrant page-event processing during annotation enumeration, which may release the associated page object; subsequent access to this object results in an application cra...

EUVD-2026-85156

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash...

CVE-2026-49292

Kiwi TCMS prior to 16.0 leaves the unauthenticated /init-db/ endpoint (handled by InitDBView in tcms/core/views.py) reachable after initial database setup. The page proxies requests to manage.py migrate, which is reentrant , so repeated access only reports "No migrations to apply." The advisory s...

UBUNTU-CVE-2026-73146

GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion...

CVE-2026-73146

GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion...

CVE-2026-73146

GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion...

PT-2026-80182

GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion...

PT-2026-69686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drop monitor component where u64 stats update begin, u64 stats inc, and u64 stats update end are called after spin unlock irqrestore, allowing local interrupts to ...