php2shell

php2shell PHP proof of concept for CVE-2026-109618 / CV...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Important: Red Hat Security Advisory: php:7.4 security update

An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

K000163863: Linux kernel vulnerabilities CVE-2026-31554 and CVE-2026-63807

Security Advisory Description CVE-2026-31554 In the Linux kernel, the following vulnerability has been resolved: futex: Require sysfutexrequeue to have identical flags Nicholas reported that his LLM found it was possible to create a UaF when sysfutexrequeue is used with different flags. The initi...

CVE-2026-98772

A flaw was found in the Linux kernel's USB serial subsystem. This flaw may result in a Denial of Service DoS due to a use-after-free vulnerability. During multiport device disconnection, a race condition allows background completion handlers to access port driver data after it has already been...

CVE-2026-98773

A flaw was found in the Linux kernel's CDC ACM Communications Device Class Abstract Control Model USB driver. A timing race condition during device disconnection and port closure can lead to a use-after-free vulnerability when communication requests attempt to access already freed memory buffers....

CVE-2026-98775

A flaw was found in the Linux kernel's Nitro Enclaves driver. An error-handling defect during enclave creation allows memory to be accessed after it has already been freed. A local attacker could exploit this use-after-free condition to cause a system crash, resulting in a Denial of Service DoS, ...

Exploit for CVE-2026-109518

PHP2Shell Research — Defensive Analysis & Remediation A sec...

Exploit for Use After Free in Google Android

CVE-2019-2215 on Skyworth / Coocaa TVs 9S60, Android 8.0 Te...

CVE-2026-98766

A flaw was found in the Linux kernel's Aspeed virtual hub vhub driver. When a device is removed, scheduled wakeup tasks are not properly canceled, allowing background work to run after the associated memory structures have been freed. A local attacker could exploit this race condition to trigger ...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Lab CVE-2026-109618 / CVE-2026-109619 Use-After-Fr...

CVE-2026-98763

A flaw was found in the Linux kernel's USB subsystem. This vulnerability allows an attacker with physical access connecting a malicious USB device, or a local user with privileges to emulate USB hardware, to cause a Denial of Service DoS or potentially execute arbitrary code. When disabling a...

CVE-2026-98758

A flaw was found in the Linux kernel's USB Type-C Connector System Software Interface UCSI GLINK driver. A local attacker with administrative privileges could trigger this flaw during device removal, leading to a Denial of Service DoS or potentially arbitrary code execution. The issue occurs...

CVE-2026-98757

A flaw was found in the Linux kernel's Cadence USB3 gadget driver. This vulnerability can lead to a Denial of Service DoS through a system crash or potentially allow privilege escalation. During device teardown, the driver releases memory without waiting for pending background work tasks to finis...

CVE-2026-98754

A flaw was found in the Linux kernel's Virtual Console Concentrator VCC driver. An omission in locking allows a race condition to occur between device cleanup operations and asynchronous event callbacks. A local attacker could exploit this timing issue to cause a use-after-free condition,...

CVE2026

php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Ad...

Chromium CVE-2026-113290: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-113287: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-113282: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-113278: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...