CVE-2026-121398

FreeRDP versions prior to 3.32.2 are vulnerable to a cross-thread use-after-free vulnerability within the freerdp-proxy dyn-channel-dump module. The issue occurs during session teardown when a malicious RDP target sends dynamic channel data while the front client is disconnecting. This allows the...

CVE-2025-60458

CVE-2025-60458 UxPlay 1.72 RTSP TEARDOWN Double Free Vulnerability Description UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic. A remote attacker can trigger multiple calls to free on the same heap memory object by sending a specially crafted RTSP...

CVE-2026-120337

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...

CVE-2026-120337 VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...

EUVD-2026-115061

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...

CVE-2026-120337

A use after free vulnerability exists in the P2P Session Teardown component of VStarcam O-KAM SuperIPCam 1.3.3.32 . Specifically, the function FUN_005a2d44 within the SuperIPCam.exe file is affected. This flaw can be triggered via a remote attack to manipulate memory. While the exploit has been p...

PT-2026-135326

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN 005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...

CVE-2026-120337: VStarcam O-KAM SuperIPCam: A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly...

Windows-WinSock-UAF-Mitigation

CVE-2026-68820: Windows WinSock afd.sys UAF Mitigation This repository contains a conceptual patch demonstrating the mitigation for CVE-2026-68820 , a critical Use-After-Free UAF vulnerability in the Windows Ancillary Function Driver for WinSock afd.sys. Active exploitation of this flaw allows a...

CVE-2026-99095

A flaw was found in the Linux kernel's VideoCore IV vc4 graphics driver. This vulnerability can result in a Denial of Service DoS due to improper cleanup during device teardown. Active timers and queued background tasks are not stopped before device memory structures are released. A local user...

CVE-2026-98957

A flaw was found in the Linux kernel's MT7915 wireless driver. The driver fails to properly disable receive network polling before freeing device resources during hardware teardown or module unloading. This flaw may allow a local privileged user to induce kernel warnings and cause system...

CVE-2026-99175

In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during connector teardown fsnotifydestroymarks keeps a reference to its current mark while it drops conn-lock to destroy the mark. This stabilizes the forward-walk cursor, but does not prevent a n...

CVE-2026-99117

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group walk on teardown brmulticastdisableportctx and brmulticastdelport walk port-mglist with hlistforeachentrysafe. However, brmulticastfinddelpg can also delete other entries from the...

SUSE CVE-2026-99175

In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during connector teardown fsnotifydestroymarks keeps a reference to its current mark while it drops conn-lock to destroy the mark. This stabilizes the forward-walk cursor, but does not prevent a n...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146609)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146609 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146645 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146677)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146677 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix response resource leak on queue teardown When an nvme target with rdma transport ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146298 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network...

CVE-2026-80728

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During device teardown, a timing issue can occur where memory used by the driver is released prematurely. This can happen during a device probe failure or rollback. This premature release leads to the driver attempting to write to an...

SUSE CVE-2026-98870

In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbdsessionsderegister removes a connection's channels from other sessions' channel lists only while conn-binding is still set: if conn-binding...