CVE-2026-49306 | Low | 3.3 | 2026-08-17 | UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-12366 | High | 8.8 | 2026-08-14 | Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference cou… |
CVE-2026-12365 | Medium | 5.8 | 2026-08-14 | A use-after-free exists in the Zephyr second-generation work queue (kernel/work.c) in the handling of delayable work timeouts. When a delayable work item's tim… |
CVE-2026-11937 | Low | 3.1 | 2026-08-12 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0… |
CVE-2026-19548 | Medium | 5.5 | 2026-08-12 | Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root… |
CVE-2026-19560 | High | 8.8 | 2026-08-11 | Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2026-19559 | High | 8.8 | 2026-08-11 | Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (… |
CVE-2026-19558 | High | 7.5 | 2026-08-11 | Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbi… |
CVE-2026-19557 | High | 8.3 | 2026-08-11 | Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially pe… |
CVE-2026-19556 | High | 8.8 | 2026-08-11 | Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
CVE-2026-73282 | Medium | 4.8 | 2026-08-11 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. |
CVE-2026-18711 | High | 7.1 | 2026-08-11 | An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used… |
CVE-2026-18706 | Medium | 6.6 | 2026-08-11 | An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause… |
CVE-2026-18700 | Medium | 6.5 | 2026-08-11 | An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the… |
CVE-2026-18692 | High | 8.8 | 2026-08-11 | An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to… |
CVE-2026-0465 | | | 2026-08-11 | A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in los… |
CVE-2026-70311 | High | 7.8 | 2026-08-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-70307 | High | 7.0 | 2026-08-11 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-68820 | High | 7.0 | 2026-08-11 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-66802 | High | 8.1 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Device Health Attestatio… |
CVE-2026-65789 | High | 8.1 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-65788 | High | 7.0 | 2026-08-11 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65783 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65782 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65781 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65779 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65778 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65776 | High | 7.0 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65775 | High | 7.8 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65678 | High | 7.0 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65657 | High | 7.8 | 2026-08-11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-62908 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p… |
CVE-2026-62898 | High | 7.5 | 2026-08-11 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. |
CVE-2026-62893 | Critical | 9.8 | 2026-08-11 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
CVE-2026-62892 | High | 7.0 | 2026-08-11 | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62888 | High | 7.8 | 2026-08-11 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-62819 | High | 8.1 | 2026-08-11 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
CVE-2026-62818 | High | 8.8 | 2026-08-11 | Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. |
CVE-2026-62815 | Critical | 9.8 | 2026-08-11 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
CVE-2026-62795 | High | 8.8 | 2026-08-11 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2026-62788 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62787 | High | 7.5 | 2026-08-11 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
CVE-2026-62780 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62779 | High | 7.8 | 2026-08-11 | Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62778 | High | 8.1 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-62774 | High | 7.0 | 2026-08-11 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62773 | High | 7.0 | 2026-08-11 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62749 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62748 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62734 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62729 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62726 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62725 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62724 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62723 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62711 | High | 7.8 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62708 | Medium | 6.4 | 2026-08-11 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-62707 | High | 7.8 | 2026-08-11 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62705 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elev… |
CVE-2026-62701 | High | 7.8 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62693 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to ele… |
CVE-2026-62690 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
CVE-2026-61939 | High | 7.0 | 2026-08-11 | Use after free in Winlogon allows an authorized attacker to elevate privileges locally. |
CVE-2026-61938 | High | 7.0 | 2026-08-11 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-61934 | High | 7.8 | 2026-08-11 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61929 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-61927 | High | 7.0 | 2026-08-11 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61920 | Medium | 6.6 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a… |
CVE-2026-61361 | High | 7.0 | 2026-08-11 | Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. |
CVE-2026-61357 | High | 7.8 | 2026-08-11 | Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-61349 | High | 7.8 | 2026-08-11 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-61348 | High | 7.0 | 2026-08-11 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-61346 | High | 7.0 | 2026-08-11 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-59125 | High | 7.0 | 2026-08-11 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-59122 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-24099 | | | 2026-08-11 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with… |
CVE-2026-73071 | Low | 3.3 | 2026-08-11 | Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_st… |
CVE-2026-53415 | High | 8.3 | 2026-08-11 | Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network ac… |
CVE-2026-50061 | High | 7.8 | 2026-08-11 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected ap… |
CVE-2026-50060 | High | 7.8 | 2026-08-11 | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected ap… |
CVE-2026-71968 | Medium | 6.7 | 2026-08-10 | OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the abi… |
CVE-2026-11742 | Low | 3.6 | 2026-08-07 | The kernel queue helper z_queue_node_peek() in kernel/queue.c dereferences a node taken from a queue's data_q list, reading the node's flag byte and, for items… |
CVE-2026-71847 | | | 2026-08-07 | Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer bu… |
CVE-2026-43632 | High | 8.1 | 2026-08-06 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints (/tokenize, /detok… |
CVE-2026-43631 | High | 8.1 | 2026-08-06 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feat… |
CVE-2026-1289 | High | 7.8 | 2026-08-06 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability… |
CVE-2026-19176 | High | 7.5 | 2026-08-06 | Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code in… |
CVE-2026-19175 | Critical | 9.6 | 2026-08-06 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page… |
CVE-2026-19172 | High | 8.3 | 2026-08-06 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sa… |
CVE-2026-19171 | Critical | 9.6 | 2026-08-06 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… |
CVE-2026-19170 | Critical | 9.6 | 2026-08-06 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… |
CVE-2026-19166 | Critical | 9.6 | 2026-08-06 | Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted H… |
CVE-2026-19165 | High | 7.5 | 2026-08-06 | Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbi… |
CVE-2026-19163 | High | 8.3 | 2026-08-06 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially p… |
CVE-2026-19159 | High | 7.5 | 2026-08-06 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentiall… |
CVE-2026-19158 | High | 7.5 | 2026-08-06 | Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to… |
CVE-2026-19155 | High | 8.3 | 2026-08-06 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2026-19154 | High | 8.3 | 2026-08-06 | Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially pe… |
CVE-2026-19151 | High | 8.8 | 2026-08-06 | Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
CVE-2026-19149 | Critical | 9.6 | 2026-08-06 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p… |