186055 matches found
CVE-2025-60476
A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2026-113270
A flaw was found in chromium-browser. A remote attacker can execute arbitrary code outside the browser sandbox by tricking a user into loading a specially crafted HTML page. This issue is caused by a use-after-free memory corruption vulnerability within the Internals component...
USN-8930-2 u-boot vulnerabilities
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could...
USN-8930-2: U-Boot vulnerabilities
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could...
Important: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
CLSA-2026-1792596933 dovecot: Fix of CVE-2026-42007
CVE-2026-42007: pigeonhole: sieve editheader: reset header-index first pointers before rebuilding the index and copy raw header data with memcpy instead of istrndup...
[SECURITY] [DSA 6575-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6575-1 [email protected] https://www.debian.org/security/ Jan MojžÃÅ¡ October 21, 2026 https://www.debian.org/security/faq -...
CVE-2026-109619
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
Overview On October 21, 2026, the PHP project announced security releases for two critical vulnerabilities in PHP. CVE-2026-109618 can corrupt memory during out-of-memory OOM handling, while CVE-2026-109619 is a use-after-free flaw involving state retained between requests. Both have a CVSSv4 sco...
Exploit for CVE-2026-109618
php2shell-probe.py Defensive probe for the PHP multipart pars...
CVE-2026-98709
A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. During channel context switching operations across multiple virtual interfaces, improper tracking of link reservations can cause an active channel context to be released prematurely while still in use by the driver. A...
CVE-2026-98670
A flaw was found in the Linux kernel's Xilinx XADC driver. During device unbinding, an improper cleanup order allows interrupt requests IRQs to remain active after delayed work has been cancelled. A local user capable of detaching the device can cause an interrupt to schedule work that executes...
CVE-2026-98734
A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker could exploit this flaw to cause a Denial of Service DoS via a system crash or potentially escalate privileges. The vulnerability occurs due to improper synchronization between packet transmission scheduling and connecti...
CVE-2026-98632
A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can trigger a use-after-free condition by cancelling a pending Bluetooth mesh transmission while it remains queued for processing. When the system later attempts to handle the queued transmission using the already freed...
Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
UPD 23.10.2026: added Kaspersky SIEM rules and events for developing custom detection rules or conducting threat hunting. UPD 22.10.2026: added a description of how the Kaspersky Managed Detection and Response service detects the described malicious activity. UPD 22.10.2026: added a description o...
CVE-2025-60478
A use-after-free in the gffilterpacketdestroy function /filtercore/filterpck.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
CVE-2025-60490
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60491
A heap use-after-free in the dasherflushsegment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
UBUNTU-CVE-2025-60490
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...