Browse CVEs

HIGH 7.3 CVE-2026-43497 In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free dlfb_ops_mm… Linux Kernel 5.10.258 / 5.15.209+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2026-43499 In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter()… Linux Kernel 6.1.175 / 6.6.140+ Fix from $1,9502026-05-21 HIGH 7.8 CVE-2026-45251 A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor. Because the blocked thread doe… FreeBSD Mitigation only Fix from $1,9502026-05-21 HIGH 8.8 CVE-2026-9126 Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted … Chrome 148.0.7778.178+ Fix from $1,9502026-05-20 HIGH 8.8 CVE-2026-9118 Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page.… Chrome 148.0.7778.178+ Fix from $1,9502026-05-20 HIGH 8.8 CVE-2026-9120 Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chrom… Chrome 148.0.7778.178+ Fix from $1,9502026-05-20 HIGH 8.8 CVE-2026-9112 Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a … Chrome 148.0.7778.179+ Fix from $1,9502026-05-20 HIGH 8.8 CVE-2026-9114 Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via malicious… Chrome 148.0.7778.179+ Fix from $1,9502026-05-20 HIGH 8.8 CVE-2026-9111 Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML pag… Chrome 148.0.7778.179+ Fix from $1,9502026-05-20 MEDIUM 5.9 CVE-2026-5947 Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SI… Bind 9.20.23 / 9.21.22+ Fix from $1,6002026-05-20 CRITICAL 9.8 CVE-2026-3593 A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 thr… Bind 9.20.23 / 9.21.22+ Fix from $2,3002026-05-20 CRITICAL 9.8 CVE-2026-33278 NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible … Unbound 1.25.1+ Fix from $2,3002026-05-20 CRITICAL 9.6 CVE-2026-8953 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefo… Firefox 115.36.0 / 140.11+ Fix from $2,3002026-05-19 HIGH 7.3 CVE-2026-8947 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderb… Firefox 115.36.0 / 140.11+ Fix from $1,9502026-05-19 CRITICAL 9.8 CVE-2026-47310 Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6… Escargot Patch available Fix from $2,3002026-05-19 MEDIUM 6.5 CVE-2026-28733 in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution. No fix yet Fix from $1,6002026-05-19 MEDIUM 6.5 CVE-2026-8746 A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this issue is the function discover_handler in the library /lib/sbi/nghttp2-s… Open5gs after 2.7.7 Fix from $1,6002026-05-17 CRITICAL 9.8 CVE-2026-8696 radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cau… Radare2 after 6.1.4 Fix from $2,3002026-05-15 CRITICAL 9.8 CVE-2026-8695 radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption b… Radare2 after 6.1.4 Fix from $2,3002026-05-15 MEDIUM 6.9 CVE-2025-48521 Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, pote… Mitigation only Fix from $1,6002026-05-15 HIGH 8.8 CVE-2026-8587 Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extensio… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 CRITICAL 9.6 CVE-2026-8580 Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML … Chrome 148.0.7778.168+ Fix from $2,3002026-05-14 HIGH 8.8 CVE-2026-8581 Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 8.3 CVE-2026-8574 Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to pote… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 8.3 CVE-2026-8575 Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perfo… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 8.8 CVE-2026-8555 Use after free in GTK in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 7.5 CVE-2026-8557 Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perfor… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 8.8 CVE-2026-8551 Use after free in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 8.3 CVE-2026-8542 Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to pote… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 8.8 CVE-2026-8544 Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14