173728 matches found
CVE-2026-110149
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-110136
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-110136
Google Chrome versions prior to 155.0.8059.79 are vulnerable to a Use after free flaw in the PDF component . This critical vulnerability allows a remote attacker to execute arbitrary code outside the sandbox by navigating to a crafted HTML page . Remediation is available in version 155.0.8059.79 ...
CVE-2026-110149
A use after free vulnerability exists in the Browser component of Google Chrome prior to version 155.0.8059.79 . A remote attacker could exploit this flaw by interacting with a crafted HTML page to achieve arbitrary code execution outside the sandbox. This issue has a Critical security severity. ...
OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files
A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row function to return an invalid memory pointer, leading to out-of-bounds or use-after-free...
GHSA-2MXG-PRVG-9JFG Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.Native.Quic.MsQuic.Schannel. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Various vulnerabilities ...
Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.Native.Quic.MsQuic.Schannel. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Various vulnerabilities ...
EUVD-2026-100712
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85876
A Use after free vulnerability in Microsoft SQL Server allows an authorized attacker to elevate privileges locally . Microsoft has released security updates to address this issue, which can be found in various Knowledge Base articles including KB5128495 (SQL Server 2019 GDR), KB5126967 (SQL Serve...
CVE-2026-103843
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-103843 Substance3D - Stager | Use After Free (CWE-416)
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-103843
Substance3D - Stager is affected by a Use After Free vulnerability (CWE-416) that could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically for a victim to open a malicious file. Adobe has r...
CVE-2026-97816
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...
CVE-2026-97809
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97806
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97807
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97808
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97789
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...