Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_helper_unregister() call…May 1, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table lookups are lockless an…Apr 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix use-after-free in timeout object destroy nft_ct_timeout_obj_destroy() frees…Apr 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() cgwb_release_workfn() calls css_put(wb-…Apr 24, 2026
- High7.8ZDI-26-692: Linux Kernel eMPIA USB Device Driver Race Condition Code Execution VulnerabilityEPSS 0.2%Apr 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bcache: fix cached_dev.sb_bio use-after-free and crash In our production environment, we have recei…Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in tls_do…Apr 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filter…Apr 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race has a race window where can re-register…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock btintel_hw_error() issues t…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a69…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue (UAF) There is a teardown order issue in the driver.Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false A UAF issu…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in update_super_work when racing with umount Commit b98535d09179 ("ext4: f…Apr 22, 2026
- High7.8Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.EPSS 0.2%Apr 14, 2026
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate pri…EPSS 0.2%Apr 14, 2026
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate priv…EPSS 0.2%Apr 14, 2026
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate priv…EPSS 0.2%Apr 14, 2026
- High7.4Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.EPSS 0.3%Apr 14, 2026
- High7.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High7.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High7.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to eleva…EPSS 0.2%Apr 14, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to elevate pri…EPSS 0.2%Apr 14, 2026
- High7.8Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026