Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 13, 2026
- Critical9.6Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.Oct 13, 2026
- High7.0Use after free in SQL Server allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliOct 13, 2026
- Medium5.9The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails.Oct 13, 2026
- High8.9Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.Oct 12, 2026
- Critical9.1IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…Oct 8, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 6, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 6, 2026
- High8.8Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 6, 2026
- Critical9.6Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.Oct 6, 2026
- High7.6A flaw was found in libsoup.Sep 4, 2026
- High8.8A flaw was found in WebKitGTK.Aug 24, 2026
- High8.3Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in se…Aug 21, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityKEVEPSS 0.3%Aug 11, 2026
- High7.0Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.Jul 14, 2026
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.Jul 14, 2026
- High7.0Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.Jul 14, 2026
- High7.8Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.Jul 14, 2026
- High7.0Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.Jul 14, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.Jul 14, 2026
- Critical9.6Sandbox escape due to use-after-free in the Disability Access APIs component.May 19, 2026
- High7.3Use-after-free in the DOM: Bindings (WebIDL) component.May 19, 2026
- Medium6.8Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service.May 12, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityKEVEPSS 0.7%Mar 31, 2026