Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.EPSS 0.1%Apr 6, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold sco_recv_frame() re…Apr 6, 2026
- High8.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Apr 4, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Apr 4, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Apr 4, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Apr 4, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: nvdimm/bus: Fix potential use after free in asynchronous initialization Dingisoul with KASAN report…Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the i…EPSS 0.2%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver core…EPSS 0.2%Apr 3, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: Fix possible UAF This fixes the following trace caused by not dropping l2cap_conn…Apr 3, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user After commit ab4eedb790ca ("Bluetooth…Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() ctnetlink_dump_exp_ct() stores…EPSS 0.1%Apr 3, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown A potential race…EPSS 0.1%Apr 3, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Syzkaller reported a panic in smc_…EPSS 0.6%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mshv: Fix use-after-free in mshv_map_user_memory error path In the error path of mshv_map_user_memo…Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_ksmbd_tcon() reuses work->tcon…Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles parse_durable_handle_context(…Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_op…Apr 2, 2026
- High8.2ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation VulnerabilityEPSS 0.1%Apr 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: defer hook memory release until rcu readers are done Yiming Qian reports UaF when c…Apr 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emu…Apr 1, 2026
- Critical9.6Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sand…Apr 1, 2026
- Critical9.6Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…Apr 1, 2026
- Critical9.6Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform…Apr 1, 2026
- High8.8Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.Apr 1, 2026