PoC-CVE-2020-9715

CVE-2020-9715 EDR Validation PoC Use-after-free in Adobe Acrobat Reader DC's EScript.api ESObject cache. For authorized red team EDR testing only. Vulnerability Adobe Acrobat Reader DC = 2020.009.20063. The EScript engine caches data ESObjects with keys that preserve the original encoding ANSI or...

optee-qemu

CVE-2021-44733: Fuzzing and exploitation of a use-after-free in the Linux kernel TEE subsystem Recently a use-after-free vulnerability was discovered in the Linux kernel TEE subsystem, up to and including version 5.15.11, and was assigned CVE-2021-44733 1. At a first glance it did not seem to be...

RLSA-2026:77028 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

CVE-2026-93373

A flaw was found in the Extensions component of Chromium. This vulnerability is caused by a use-after-free condition, where the application attempts to access system memory after it has already been released. A remote attacker could exploit this flaw by enticing a user to install or run a special...

CVE-2026-107183

A flaw was found in llama.cpp. An unauthenticated remote attacker could exploit this vulnerability by submitting a specially crafted completion request with malformed chat parser parameters. Due to improper memory handling, this request triggers a use-after-free condition that corrupts memory. Th...

CVE-2026-106347

An use after free flaw was found in the Track component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936270...

CVE-2026-106358

An use after free flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567160164...

CLEANSTART-2026-NO09997 Use of Arrays

Security vulnerability affects the apache-hive package. Use of Arrays...

CLEANSTART-2026-WN90580 flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature

Security vulnerability affects the apache-hive package. A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature...

PT-2026-107983

ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...

The vulnerability of the Security Health Service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Security Health Service for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-108007

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free...

FreeBSD : xorg -- Multiple vulnerabilities (06bf834f-c31f-11f1-9b94-901b0e13f1a0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 06bf834f-c31f-11f1-9b94-901b0e13f1a0 advisory. X.Org reports: Multiple issues have been found in the X server and Xwayland implementations...

EulerOS 2.0 SP15 : curl (EulerOS-SA-2026-3903)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability exists in libcurl when an applicationx000D configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS orx00...

RHEL 9 : python3.14 (RHSA-2026:77021)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77021 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791459292)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791459292 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP...

RHEL 10 : thunderbird (RHSA-2026:77631)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:77631 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM:...

RHEL 10 : python3.14 (RHSA-2026:77018)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77018 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:22023-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22023-1 advisory. Changes in chromium: - Chromium 154.0.8037.97 boo1284015 CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103626: Incorrect authorization ...