OSEC-2026-30 Ephemeron data is freed while still referenced when the key is an `Infix_tag` closure

Summary In OCaml before 4.14.5, when the key of an ephemeron is a closure with Infixtag a function of a mutually recursive group that is not the first function, the mark phase does not keep the ephemeron's data alive, although the key is alive. The clean phase does treat the key as alive, so it...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

TimeAfterFree

TimeAfterFree PHP 8 sandbox escape PoC demonstrating a disablefunctions bypass on Unix-like systems. This exploit leverages a use-after-free bug to bypass disablefunctions and execute system commands. The exploitation techniques used for leaking heap pointers and obtaining read/write primitives...

CVE-2026-121963

A flaw was found in FreeRDP. This vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the client application. By sending audio data packets over a dynamic virtual channel and immediately closing the connection, the server triggers a...

CVE-2026-121961

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can trigger a race condition by repeatedly requesting the creation of an already active dynamic virtual channel while client data is concurrently processed. This issue leads to a use-after-free condition,...

CVE-2026-119372

A flaw was found in SQLite. A use-after-free vulnerability exists in its full-text search extension due to improper handling of cached memory pointers during query processing. An attacker can exploit this issue by executing a specially crafted full-text search query, causing the application to...

CVE-2026-95620

A flaw was found in Qt. A use-after-free vulnerability in the HTTP/2 client implementation of the QNetworkAccessManager component allows a malicious or compromised HTTP/2 server to crash the client application. This flaw primarily results in a Denial of Service DoS...

CVE-2026-115567

A flaw was found in Tokio. A race condition between interval timer polling and the multi-threaded runtime driver can cause an internal timer entry to be dropped without proper synchronization while being processed. A local attacker could exploit this timing issue to trigger a use-after-free,...

CVE-2026-116540

A flaw was found in netty-tcnative. A use-after-free vulnerability occurs during session ticket key rotation when handling concurrent connections. A remote attacker can exploit this flaw by initiating TLS Transport Layer Security handshakes while ticket keys are being rotated, causing the system ...

CVE-2026-99270

A flaw was found in the Linux kernel's TCP networking subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS through a system crash. When a TCP connection migration fails during request handling, the kernel frees the request socket structure without properly...

CVE-2026-93424

A flaw was found in FastNetMon. An unauthenticated remote attacker with access to the NetFlow or IPFIX listening ports can trigger a race condition during concurrent template updates and traffic processing. This issue causes the application to access memory after it has been freed a use-after-fre...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

vvdecapp Decoder Heap Buffer Overflow DoS

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

vvdecapp readAlf Heap Buffer Overflow DoS

The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...