Browse CVEs

HIGH 7.8 CVE-2026-43437 In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() In th… Linux Kernel 5.10.253 / 6.1.167+ Fix from $1,9502026-05-08 HIGH 7.8 CVE-2026-43438 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Remove redundant css_put() in scx_cgroup_init() The iterator css_for… Linux Kernel 6.12.78 / 6.18.19+ Fix from $1,9502026-05-08 HIGH 7.8 CVE-2026-43440 In the Linux kernel, the following vulnerability has been resolved: net/mana: Null service_wq on setup error to prevent double destroy In mana_gd_s… Linux Kernel 6.18.19 / 6.19.9+ Fix from $1,9502026-05-08 HIGH 7.8 CVE-2026-43426 In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: fix use-after-free in ISR during device removal In usbhs_re… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-05-08 CRITICAL 9.8 CVE-2026-43402 In the Linux kernel, the following vulnerability has been resolved: kthread: consolidate kthread exit paths to prevent use-after-free Guillaume rep… Linux Kernel 6.18.19 / 6.19.9+ Fix from $2,3002026-05-08 HIGH 7.8 CVE-2026-43388 In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: clear walk_control on inactive context in damos_walk() damos_wal… Linux Kernel 6.18.19 / 6.19.9+ Fix from $1,9502026-05-08 CRITICAL 9.8 CVE-2026-43379 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() opinfo pointer… Linux Kernel 6.6.130 / 6.12.78+ Fix from $2,3002026-05-08 HIGH 7.8 CVE-2026-43370 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->proces… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-05-08 HIGH 7.8 CVE-2026-43374 In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry When removing a … Linux Kernel 6.12.78 / 6.18.19+ Fix from $1,9502026-05-08 CRITICAL 9.8 CVE-2026-43376 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free by using call_rcu() for oplock_info ksmbd currently f… Linux Kernel 6.6.130 / 6.12.78+ Fix from $2,3002026-05-08 HIGH 7.8 CVE-2026-43378 In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2_open() The opinfo pointer obtained via … Linux Kernel 6.1.167 / 6.6.130+ Fix from $1,9502026-05-08 HIGH 7.8 CVE-2026-43339 In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_addr() The mentioned helper tr… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-05-08 HIGH 8.8 CVE-2026-43322 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in le_read_features_complete This fixes the follow… Linux Kernel 6.19.12+ Fix from $1,9502026-05-08 HIGH 7.8 CVE-2026-43303 In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: clear page->private in free_pages_prepare() Several subsystems (… Linux Kernel 6.18.16 / 6.19.6+ Fix from $1,9502026-05-08 HIGH 8.1 CVE-2026-8092 Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption… Firefox 115.35.2 / 140.10.2+ Fix from $1,9502026-05-07 HIGH 7.3 CVE-2026-8090 Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunder… Firefox 115.35.2 / 140.10.2+ Fix from $1,9502026-05-07 HIGH 8.8 CVE-2026-8016 Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-8001 Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-8002 Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7984 Use after free in ReadingMode in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute a… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7985 Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perfo… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7987 Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7991 Use after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary … Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7974 Use after free in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7975 Use after free in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 7.5 CVE-2026-7976 Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to execute … Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7980 Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7970 Use after free in TopChrome in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7956 Use after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7938 Use after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06