CVE-2026-110922 | High | 8.8 | 2026-10-15 | Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML p… |
CVE-2026-110921 | High | 8.8 | 2026-10-15 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-110919 | High | 8.8 | 2026-10-15 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-110915 | High | 8.8 | 2026-10-15 | Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-108446 | High | 8.8 | 2026-10-15 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-108442 | High | 8.8 | 2026-10-15 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-108438 | Medium | 6.5 | 2026-10-15 | Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-58099 | | | 2026-10-15 | When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally to track list traversal position) b… |
CVE-2026-86567 | High | 8.8 | 2026-10-14 | A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap. |
CVE-2026-102078 | Medium | 5.9 | 2026-10-14 | A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attack… |
CVE-2026-101970 | Medium | 6.5 | 2026-10-14 | A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjac… |
CVE-2026-97205 | High | 8.1 | 2026-10-14 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations… |
CVE-2026-84471 | | | 2026-10-14 | The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to p… |
CVE-2026-92392 | High | 8.1 | 2026-10-14 | During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server
(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after
fre… |
CVE-2026-94370 | | | 2026-10-14 | A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::S… |
CVE-2026-50217 | Medium | 4.7 | 2026-10-14 | A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial… |
CVE-2026-50215 | Medium | 4.4 | 2026-10-14 | A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect ru… |
CVE-2026-94453 | High | 7.5 | 2026-10-13 | Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or… |
CVE-2026-110172 | High | 8.8 | 2026-10-13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-110171 | High | 8.8 | 2026-10-13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-110170 | Medium | 4.3 | 2026-10-13 | Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromi… |
CVE-2026-110169 | High | 8.8 | 2026-10-13 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-110168 | High | 8.8 | 2026-10-13 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-110167 | High | 8.8 | 2026-10-13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-110165 | Critical | 9.6 | 2026-10-13 | Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbo… |
CVE-2026-110164 | High | 8.8 | 2026-10-13 | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted… |
CVE-2026-110163 | High | 8.8 | 2026-10-13 | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-110162 | High | 8.8 | 2026-10-13 | Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-110161 | Critical | 9.6 | 2026-10-13 | Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network t… |
CVE-2026-110158 | High | 8.3 | 2026-10-13 | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary cod… |
CVE-2026-110157 | High | 8.8 | 2026-10-13 | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-110154 | High | 8.8 | 2026-10-13 | Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft… |
CVE-2026-110153 | High | 8.8 | 2026-10-13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-110151 | High | 8.8 | 2026-10-13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-110149 | Critical | 9.6 | 2026-10-13 | Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa… |
CVE-2026-110148 | High | 8.8 | 2026-10-13 | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-110147 | High | 8.8 | 2026-10-13 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-110145 | High | 8.3 | 2026-10-13 | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary cod… |
CVE-2026-110142 | Critical | 9.6 | 2026-10-13 | Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML… |
CVE-2026-110139 | High | 8.8 | 2026-10-13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-110138 | High | 8.3 | 2026-10-13 | Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrar… |
CVE-2026-110137 | High | 8.8 | 2026-10-13 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-110136 | Critical | 9.6 | 2026-10-13 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-85876 | High | 7.0 | 2026-10-13 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-103843 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
CVE-2026-97816 | Critical | 9.8 | 2026-10-13 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
CVE-2026-97809 | High | 7.8 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-97808 | High | 7.0 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-97807 | High | 7.8 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-97806 | High | 7.8 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-97789 | High | 7.5 | 2026-10-13 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-97775 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97771 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97759 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97752 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97747 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97745 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97743 | Medium | 6.5 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-97738 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97017 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97010 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-96997 | High | 7.8 | 2026-10-13 | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. |
CVE-2026-96950 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-96947 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-96946 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-96937 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-96934 | Critical | 9.8 | 2026-10-13 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-96923 | High | 7.0 | 2026-10-13 | Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96919 | High | 7.0 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96912 | High | 7.8 | 2026-10-13 | Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96852 | High | 7.0 | 2026-10-13 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2026-96324 | High | 7.8 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-96323 | High | 7.0 | 2026-10-13 | Use after free in Windows Update allows an authorized attacker to elevate privileges locally. |
CVE-2026-96322 | High | 7.0 | 2026-10-13 | Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
CVE-2026-96319 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96317 | High | 7.8 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96310 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96309 | High | 7.8 | 2026-10-13 | Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2026-96308 | High | 7.8 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-96307 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-96305 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-96304 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96302 | High | 7.0 | 2026-10-13 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-96301 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96254 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96253 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96250 | High | 7.0 | 2026-10-13 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-96249 | High | 7.8 | 2026-10-13 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-96244 | High | 7.8 | 2026-10-13 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
CVE-2026-96223 | High | 7.8 | 2026-10-13 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-96216 | High | 7.0 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-96108 | High | 7.8 | 2026-10-13 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-88182 | High | 7.8 | 2026-10-13 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-88178 | Critical | 9.8 | 2026-10-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-88173 | High | 8.1 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
CVE-2026-88161 | High | 7.0 | 2026-10-13 | Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. |
CVE-2026-88152 | High | 7.8 | 2026-10-13 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-88146 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an… |
CVE-2026-88144 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-88141 | High | 7.0 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |