Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Apr 13, 2026
- Critical9.1Use-after-free (UAF) was possible in the , , and when a memory allocation fails with a and the decompression instance is re-used.Apr 13, 2026
- High8.4Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc().EPSS 0.2%Apr 13, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() When ec_install_handlers() returns…Apr 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original…Apr 13, 2026
- High7.1UAF vulnerability in the kernel module.Apr 13, 2026
- High7.1UAF vulnerability in the kernel module.Apr 13, 2026
- Critical9.6NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and lat…Apr 10, 2026
- Medium6.3A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing.Apr 10, 2026
- High7.8HDF5 is software for managing data.Apr 9, 2026
- Low1.0Wasmtime is a runtime for WebAssembly.Apr 9, 2026
- Medium4.4LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Apr 9, 2026
- High8.8Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 8, 2026
- High8.8Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 8, 2026
- Critical9.6Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially per…Apr 8, 2026
- High8.8Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 8, 2026
- High8.8Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 8, 2026
- High8.8Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 8, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 8, 2026
- High8.1Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in…Apr 7, 2026
- Medium6.2OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Apr 7, 2026
- High8.7A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.Apr 7, 2026
- Medium5.5Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Apr 6, 2026
- High7.8Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.EPSS 0.1%Apr 6, 2026