CVE-2026-55330 | Critical | 9.8 | 2026-10-06 | In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code exe… |
CVE-2026-106423 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106421 | High | 8.8 | 2026-10-06 | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-106419 | Critical | 9.6 | 2026-10-06 | Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra… |
CVE-2026-106411 | High | 8.8 | 2026-10-06 | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106393 | High | 8.3 | 2026-10-06 | Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code… |
CVE-2026-106383 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106382 | Critical | 9.6 | 2026-10-06 | Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML… |
CVE-2026-106373 | High | 8.8 | 2026-10-06 | Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a craf… |
CVE-2026-106358 | Critical | 9.6 | 2026-10-06 | Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML… |
CVE-2026-106357 | High | 8.8 | 2026-10-06 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106349 | High | 8.8 | 2026-10-06 | Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-106347 | High | 8.8 | 2026-10-06 | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106335 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106318 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106315 | High | 8.8 | 2026-10-06 | Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted H… |
CVE-2026-106298 | Critical | 9.6 | 2026-10-06 | Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the san… |
CVE-2026-106291 | High | 8.8 | 2026-10-06 | Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafte… |
CVE-2026-106283 | High | 8.8 | 2026-10-06 | Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co… |
CVE-2026-106281 | Critical | 9.6 | 2026-10-06 | Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte… |
CVE-2026-106278 | High | 8.8 | 2026-10-06 | Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the s… |
CVE-2026-106269 | High | 8.8 | 2026-10-06 | Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-106268 | High | 8.8 | 2026-10-06 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106257 | High | 8.8 | 2026-10-06 | Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106248 | High | 8.8 | 2026-10-06 | Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-106235 | High | 8.8 | 2026-10-06 | Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-106234 | Critical | 9.6 | 2026-10-06 | Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code… |
CVE-2026-106233 | High | 8.3 | 2026-10-06 | Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code… |
CVE-2026-106227 | Critical | 9.6 | 2026-10-06 | Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-106211 | Critical | 9.6 | 2026-10-06 | Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary cod… |
CVE-2026-106204 | High | 8.8 | 2026-10-06 | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (C… |
CVE-2026-106200 | High | 8.8 | 2026-10-06 | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106197 | Critical | 9.6 | 2026-10-06 | Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pa… |
CVE-2026-106193 | High | 8.8 | 2026-10-06 | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106190 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-57559 | High | 7.8 | 2026-10-06 | Memory corruption while processing service requests. |
CVE-2026-57555 | High | 7.8 | 2026-10-06 | Memory Corruption when executing system service routines due to improper handling of user input buffers. |
CVE-2026-57554 | High | 7.8 | 2026-10-06 | Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. |
CVE-2026-57537 | High | 7.8 | 2026-10-06 | Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. |
CVE-2026-25291 | High | 7.8 | 2026-10-06 | Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. |
CVE-2026-25274 | Medium | 6.7 | 2026-10-06 | Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. |
CVE-2026-105249 | Medium | 4.8 | 2026-10-05 | A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/meta/txtp_process.c of the component TXTP… |
CVE-2026-20542 | Medium | 6.7 | 2026-10-05 | In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtai… |
CVE-2026-20537 | Medium | 6.7 | 2026-10-05 | In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine… |
CVE-2026-20536 | Medium | 6.7 | 2026-10-05 | In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine… |
CVE-2026-20531 | High | 8.4 | 2026-10-05 | In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges n… |
CVE-2026-103630 | Critical | 9.6 | 2026-10-02 | Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-103624 | High | 8.3 | 2026-10-02 | Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-103623 | High | 8.8 | 2026-10-02 | Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-103622 | High | 8.8 | 2026-10-02 | Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-73637 | High | 7.3 | 2026-10-01 | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to ca… |
CVE-2026-57941 | Critical | 9.8 | 2026-10-01 | Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy
This issue affects Apache HTTP Server: from 2.4.0 throu… |
CVE-2026-56154 | Critical | 9.8 | 2026-10-01 | Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...})
This issue affects Apache HTTP Server: from 2.4.0 t… |
CVE-2026-103679 | Medium | 6.5 | 2026-10-01 | A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) fil… |
CVE-2026-101276 | | | 2026-09-30 | iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without canc… |
CVE-2026-19445 | | | 2026-09-30 | A remote, unauthenticated TLS client can make a server crash or call
through a freed pointer if its sni_callback assigns a different context to
SSLSocket.conte… |
CVE-2026-47598 | High | 7.0 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause… |
CVE-2026-47597 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user coul… |
CVE-2026-47594 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence… |
CVE-2026-47590 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence… |
CVE-2026-47589 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence… |
CVE-2026-47588 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free condition by issuing a sequence of driver… |
CVE-2026-47587 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerabilit… |
CVE-2026-47586 | Medium | 6.4 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where an attacker could cause a use-after-free. A successful expl… |
CVE-2026-47579 | High | 7.8 | 2026-09-30 | The NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode driver through which a user might trigger a use-after-free condition. Suc… |
CVE-2026-47560 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a use-after-free. A successful exp… |
CVE-2026-47551 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause a use-after-free. A successful explo… |
CVE-2026-47516 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this… |
CVE-2026-47505 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of… |
CVE-2026-47500 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths… |
CVE-2026-74222 | High | 8.2 | 2026-09-29 | U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage f… |
CVE-2026-102324 | High | 8.3 | 2026-09-29 | Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially ex… |
CVE-2026-102316 | Critical | 9.6 | 2026-09-29 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the s… |
CVE-2026-102309 | Critical | 9.6 | 2026-09-29 | Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML… |
CVE-2026-102308 | Critical | 9.6 | 2026-09-29 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the s… |
CVE-2026-102306 | Critical | 9.6 | 2026-09-29 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c… |
CVE-2026-102304 | Critical | 9.6 | 2026-09-29 | Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML… |
CVE-2026-95373 | High | 8.8 | 2026-09-29 | Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the… |
CVE-2026-95372 | High | 8.3 | 2026-09-29 | Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute… |
CVE-2026-95356 | Critical | 9.6 | 2026-09-29 | Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary… |
CVE-2026-95354 | High | 8.3 | 2026-09-29 | Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute ar… |
CVE-2026-95353 | High | 8.8 | 2026-09-29 | Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-95351 | High | 8.3 | 2026-09-29 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code ou… |
CVE-2026-95348 | High | 8.3 | 2026-09-29 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute a… |
CVE-2026-95347 | Critical | 9.6 | 2026-09-29 | Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted… |
CVE-2026-95345 | High | 8.8 | 2026-09-29 | Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-95343 | High | 8.8 | 2026-09-29 | Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-95339 | Critical | 9.6 | 2026-09-29 | Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted H… |
CVE-2026-95338 | High | 8.8 | 2026-09-29 | Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file… |
CVE-2026-95335 | High | 8.3 | 2026-09-29 | Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitra… |
CVE-2026-95333 | High | 8.1 | 2026-09-29 | Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network t… |
CVE-2026-95325 | Critical | 9.6 | 2026-09-29 | Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
CVE-2026-95319 | High | 8.3 | 2026-09-29 | Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute ar… |
CVE-2026-95315 | High | 7.8 | 2026-09-29 | Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Intera… |
CVE-2026-95313 | Critical | 9.6 | 2026-09-29 | Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
CVE-2026-95310 | Critical | 9.6 | 2026-09-29 | Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML p… |
CVE-2026-95299 | Critical | 9.6 | 2026-09-29 | Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-95298 | High | 7.8 | 2026-09-29 | Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Int… |
CVE-2026-95282 | High | 8.8 | 2026-09-29 | Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-95277 | Critical | 9.6 | 2026-09-29 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |