CVE-2026-72486

A flaw was found in the Linux kernel's mtk-adsp mailbox driver. During device teardown, if the Sound Open Firmware SOF audio driver fails to initialize, a timing issue can occur where an interrupt is processed after the associated memory has been released. This Use-After-Free UAF vulnerability ca...

CVE-2026-72472

A flaw was found in the Network File System NFS component of the Linux kernel. Inadequate synchronization during the traversal of the file lock list can lead to a use-after-free UAF vulnerability. This occurs when certain functions release file locks prematurely while iterating, potentially...

CVE-2026-72411

A flaw was found in the Linux kernel's mxl862xx Digital Subscriber Line DSA driver. An issue during the driver's teardown process, specifically when handling MDIO CRC errors, can lead to a use-after-free vulnerability. This allows the system to attempt to access memory that has already been...

CVE-2026-72012

A flaw was found in the Linux kernel's tracing/osnoise component. When unregistering a tracer instance, the system failed to call synchronizercu, a mechanism for synchronizing read-copy-update RCU operations. This oversight could allow RCU readers to access memory that has already been freed,...

CVE-2026-74561

A flaw was found in the Linux kernel, specifically within its nexthop component responsible for network routing. A timing issue, known as a race condition, allows the system to access memory after it has been freed. This occurs when the kernel attempts to flush its routing cache while other...

CVE-2026-74511

A flaw was found in the Linux kernel's Bluetooth management component. A race condition exists during Extended Inquiry Response EIR updates when the MGMTOPSETLOCALNAME operation is processed concurrently with modifications to the UUID list. This can lead to a use-after-free vulnerability in the...

CVE-2026-74503

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. An unprivileged local user with access to the /dev/snd/timer and /dev/snd/seq devices can exploit a race condition where a timer instance's SNDRVTIMERIFLGDEAD flag is not properly cleared after closing...

CVE-2026-74565

A flaw was found in the Linux kernel's netfilter subsystem. The global nature of the nftobject rhltable allows a local attacker to access objects that are being deallocated by other network namespaces. This can lead to a use-after-free vulnerability, potentially resulting in memory corruption or...

CVE-2026-74529

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI synchronization component. This vulnerability, a Use-After-Free UAF, occurs when a connection object is prematurely released while the hcisync task is still active. A local attacker could potentially exploit this to...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-72042

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI subsystem. An issue in the event delivery mechanism, specifically a reference count underflow, can lead to a use-after-free vulnerability. This occurs when a user's reference count is prematurely decremented...

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

CVE-2026-49306

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49306

CVE-2026-49306 is described as a use-after-free (UAF) vulnerability in the time and time zone module, impacting availability. The available context references Huawei consumer device bulletins (laptops, vision, wearables), with a CVSS v3.1 base score of 3.3 (LOW) and an exploit vector limited to l...

CVE-2026-49306

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability...

BIT-NODE-MIN-2026-56848

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

BIT-NODE-2026-56848

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

BIT-DOTNET-SDK-2026-62898 Microsoft QUIC Information Disclosure Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

BIT-DOTNET-2026-62898 Microsoft QUIC Information Disclosure Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...