CVE-2026-98639

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the RISC-V architecture. During nested virtualization acceleration, control flags are written before the target page parameters are properly committed to shared memory. Consequently, the supervisor interface or...

CVE-2026-113290

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment. By tricking a user into visiting a specially crafted HTML page, the attacker can exploit a use-after-free memory condition in the...

CVE-2026-113324

An use after free flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=563357593 https://code.google.com/p/chromium/issues/detail?id=113324...

CVE-2026-113216

An use after free flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556899544 https://code.google.com/p/chromium/issues/detail?id=113216...

CVE-2026-113197

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by tricking a user into visiting a specially crafted HTML page. The issue is caused by a use-after-free memory error in the Forms component, where...

CVE-2026-113115

An use after free flaw was found in the Transactions Platform component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514018015 https://code.google.com/p/chromium/issues/detail?id=113115...

CVE-2026-113321

An use after free flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513521516 https://code.google.com/p/chromium/issues/detail?id=113321...

CVE-2026-113305

An use after free flaw was found in the Privacy component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=558464760 https://code.google.com/p/chromium/issues/detail?id=113305...

CVE-2026-113262

A flaw was found in the Extensions component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering a use-after-free memory error where previously released memory is improperly accessed. Successful exploitation could...

CVE-2026-113181

A flaw was found in the Navigation component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to open a specially crafted web page. The issue stems from a use-after-free condition, which occurs when the application...

CVE-2026-113163

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the Web Graphics Library WebGL component allows a remote attacker to execute arbitrary code within the application sandbox. By tricking a user into visiting a maliciously crafted web page, an attacker can exploit...

CVE-2026-113021

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a use-after-free condition—where memory is accessed after being...

CVE-2026-113017

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553132165 https://code.google.com/p/chromium/issues/detail?id=113017...

CVE-2026-113006

An out of bounds read flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496650333 https://code.google.com/p/chromium/issues/detail?id=113006...

CVE-2026-98742

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer subsystem. A local user could exploit a race condition caused by missing locking during compatibility ioctl input/output control operations. By sending concurrent port creation requests, an attacker can corrup...

CVE-2026-113251

A flaw was found in the PDF component of chromium-browser. A remote attacker can exploit this vulnerability by convincing a user to open a specially crafted HTML page, triggering a use-after-free condition where memory is accessed after it has been released. Successful exploitation allows the...

CVE-2026-113073

An use after free flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519217664 https://code.google.com/p/chromium/issues/detail?id=113073...

CVE-2026-113076

A flaw was found in the Toolbar component of Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox by tricking a user into opening a specially crafted HTML page. The issue is caused by a use-after-free condition, where the application...

CVE-2026-113028

A flaw was found in the Media component of chromium-browser. A remote attacker could exploit this vulnerability to execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue occurs due to a use-after-free condition, where the applicati...

CVE-2026-98750

A flaw was found in the Linux kernel's TTY terminal subsystem. A race condition occurs when closing a terminal device while the device number is simultaneously re-registered by a driver that does not guarantee minor number exclusivity. A local attacker could exploit this timing window to trigger ...

CVE-2026-113277

An out of bounds read flaw was found in the CustomTabs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=552951369 https://code.google.com/p/chromium/issues/detail?id=113277...

CVE-2026-113151

An out of bounds read flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560157609 https://code.google.com/p/chromium/issues/detail?id=113151...

CVE-2026-113035

An out of bounds read flaw was found in the API component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498786597 https://code.google.com/p/chromium/issues/detail?id=113035...

CVE-2026-113278

An use after free flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514080341 https://code.google.com/p/chromium/issues/detail?id=113278...

CVE-2026-113236

A flaw was found in Google Chrome. A remote attacker can achieve arbitrary code execution inside the sandbox by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a use-after-free condition in the Navigation component, where the application references memory...

CVE-2026-113338

A flaw was found in the Turbolev component of chromium-browser. By convincing a user to visit a specially crafted HTML page, a remote attacker can trigger a use-after-free memory error. This vulnerability allows the attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113327

A flaw was found in the Chromecast component of Chromium. This vulnerability is caused by a use-after-free condition, which occurs when the application attempts to reference memory after it has been released. A remote attacker could exploit this flaw by convincing a user to visit a specially...

CVE-2026-113215

A flaw was found in Chromium's Extensions component. A remote attacker can exploit this vulnerability to achieve arbitrary code execution inside the browser sandbox by enticing a user to view a specially crafted HTML page. This issue occurs due to a use-after-free condition, where the application...

CVE-2026-113190

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox. An attacker could exploit this flaw by tricking a user into visiting a specially crafted HTML page...

CVE-2026-113165

An use after free flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553163770 https://code.google.com/p/chromium/issues/detail?id=113165...

CVE-2026-113140

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536445815...

CVE-2026-113217

An use after free flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=568900845 https://code.google.com/p/chromium/issues/detail?id=113217...

CVE-2026-113275

A flaw was found in Chromium. A use-after-free memory vulnerability in an application programming interface API allows a remote attacker to execute arbitrary code within the browser sandbox. To exploit this flaw, an attacker must convince a user to load a specially crafted HTML page...

CVE-2026-113198

A flaw was found in chromium-browser. A use-after-free memory flaw exists within the Extensions subsystem, where memory is improperly accessed after it has been freed. By enticing a user to visit a specially crafted HTML page, a remote attacker could trigger this vulnerability to execute arbitrar...

CVE-2026-113103

A flaw was found in chromium-browser. A remote attacker can exploit a use-after-free vulnerability, where released memory is improperly accessed, in the WebProtect component to achieve arbitrary code execution inside the browser sandbox. To exploit this issue, an attacker must trick a user into...

CVE-2026-113068

An use after free flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=40942045 https://code.google.com/p/chromium/issues/detail?id=113068...

CVE-2026-113116

A flaw was found in the DevTools component of Chromium. A remote attacker could potentially execute arbitrary code outside of the browser sandbox by enticing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free condition, which occurs when memory is...

CVE-2026-113075

A flaw was found in the DevTools component of Chromium. A remote attacker could execute arbitrary code inside the browser sandbox by convincing a user to visit a crafted HTML page. This vulnerability is caused by a use-after-free condition, where the application improperly references memory that...

CVE-2026-112995

A flaw was found in the Animation component of Chromium. This use-after-free issue occurs when the application attempts to access memory after it has been freed. A remote attacker could exploit this vulnerability by convincing a user to open a specially crafted HTML page, potentially leading to...

CVE-2026-113033

An use after free flaw was found in the Streaming component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499869964 https://code.google.com/p/chromium/issues/detail?id=113033...

CVE-2026-113025

An use after free flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533113044 https://code.google.com/p/chromium/issues/detail?id=113025...

CVE-2026-113055

A flaw was found in chromium-browser's FullScreen component. A remote attacker could execute arbitrary code inside the browser sandbox by convincing a user to visit a specially crafted HTML page. This issue stems from a type confusion error during fullscreen handling, where data is processed usin...

CVE-2026-98861

A flaw was found in the Linux kernel's function probe fprobe tracing mechanism. When handlers execute during inactive Read-Copy Update RCU, a kernel synchronization mechanism states, unregistration routines fail to wait for active handlers to complete before freeing memory. A privileged local...

CVE-2026-98859

A flaw was found in the Linux kernel's Human Interface Device HID multitouch driver. When a multitouch device is disconnected or removed, the driver fails to prevent the release timer from being rescheduled by incoming input reports. Once the driver deallocates the device data, the timer callback...

CVE-2026-98840

A flaw was found in the Linux kernel's virtual console screen driver. A race condition between virtual console write operations and console deallocation can cause the kernel to access previously freed memory, resulting in a use-after-free vulnerability. A local user could exploit this flaw to cau...

CVE-2026-98776

A flaw was found in the Linux kernel's Android Binder filesystem binderfs. A local user can exploit a race condition during concurrent device creation and deletion to trigger a use-after-free UAF condition, which occurs when freed memory is written to while being re-registered. This issue may all...

CVE-2026-98762

A flaw was found in the Linux kernel's USB DWC2 driver. A race condition during host controller teardown or initialization failure allows the wakeup timer to execute after host resources have been released. A local user could exploit this use-after-free vulnerability to cause a Denial of Service...

CVE-2026-98830

A flaw was found in the Linux kernel's Silicon Labs WFx Wi-Fi driver. The driver fails to validate the length of firmware responses during Management Information Base MIB queries before copying the data into memory buffers. A compromised or malicious wireless device could supply an oversized...

CVE-2026-98800

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program attached to a trampoline is detached, the kernel may release the program's memory prematurely before preempted tasks have safely completed execution. A local user can exploit this race condition to...

CVE-2026-113102

A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the FileSystem component allows a remote attacker to access sensitive memory within the browser's sandbox environment. By convincing a user to visit a specially crafted HTML page, the attacker can trigger an unauthorized...