Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Apr 1, 2026
- High8.8Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 1, 2026
- High7.5Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a craf…Apr 1, 2026
- High8.8Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 1, 2026
- High8.8Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Apr 1, 2026
- Medium6.3Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 1, 2026
- High7.8The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to…Apr 1, 2026
- High7.8The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state.Apr 1, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityKEVEPSS 0.7%Mar 31, 2026
- High7.5An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code.Mar 31, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Mar 27, 2026
- Medium6.5Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS.EPSS 0.2%Mar 27, 2026
- High7.5LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Mar 26, 2026
- Medium5.5EVerest is an EV charging software stack.Mar 26, 2026
- Medium5.3EVerest is an EV charging software stack.Mar 26, 2026
- Medium4.2EVerest is an EV charging software stack.Mar 26, 2026
- Critical9.2Squid is a caching proxy for the Web.Mar 26, 2026
- High8.7Squid is a caching proxy for the Web.Mar 26, 2026
- High8.5cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/crypto device driver that allows local users to t…Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() afte…EPSS 0.1%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Yiming Qian reports Use-after-fre…EPSS 0.1%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix use-after-free on error path In the error path of sev_tsm_init_locked(), the code…EPSS 0.1%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs When shrinking the nu…EPSS 0.1%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-after-free error in c…EPSS 0.1%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free and list corruption on sender error The analysis from Breno: When the SMI…EPSS 0.1%Mar 25, 2026