158957 matches found
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-100832
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Canvas2D component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-100790
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XSLT component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2026-100785
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-100780
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-100779
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XSLT component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2026-100777
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Canvas2D component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-100776
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...
CVE-2026-100773
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Storage: IndexedDB component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-100772
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-100769
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...
CVE-2026-100767
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Networking: Cache component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-100757
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Widget component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
Januscape
Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...
cve-2026-19553-wrap-bio
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-19553-wrap-bio cve-2026-19553-wrap-bio CPython ssl - Python Software Foundation ssl.SSLContext.wrapbio did not require serverhostname to be non-None when checkhostname is set. SSLObject silently skips hostnam...
AndroidKernelVulnerability
Android Kernel Vulnerability Overview In November 2017 a use-after-free bug to linux kernel was detected by syzkaller system. In February 2018 this was patched in some linux kernels and android versions. This fix was never included in Android monthly security bulletins, so it was not patched in...
CVE-2026-54107
When ValidateHwnd Isn't a Gate: Root-Causing CVE-2026-54107 A use-after-free in win32kfull.sys window lifecycle management — how I found it, how I convinced myself it was real, and what the MSRC process actually looked like from the researcher's side. It was close to 2 AM when the target VM stopp...
NFSundown
Overview Proof-of-Concept exploit for NFSundown CVE-2025-38089. It can remotely trigger a kernel crash in an NFS server. Details A remote attacker can trigger a kernel null pointer dereference and crash the kernel by sending a specially crafted RPC request. This occurs due to improper handling of...
