Browse CVEs

HIGH 7.8 CVE-2026-23392 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call sy… Linux Kernel 6.1.167 / 6.6.130+ Fix from $1,9502026-03-25 HIGH 7.8 CVE-2026-23351 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Yiming Qian r… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-03-25 HIGH 7.8 CVE-2026-23344 In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix use-after-free on error path In the error path of sev_tsm_ini… Linux Kernel 6.19.7+ Fix from $1,9502026-03-25 HIGH 7.8 CVE-2026-23336 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-a… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-03-25 HIGH 7.8 CVE-2026-23340 In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs W… Linux Kernel 5.15.203 / 6.1.167+ Fix from $1,9502026-03-25 HIGH 7.8 CVE-2026-23322 In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free and list corruption on sender error The analysis from … Linux Kernel 6.18.17 / 6.19.7+ Fix from $1,9502026-03-25 HIGH 7.8 CVE-2026-23319 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim The root cause of this … Linux Kernel 6.1.167 / 6.6.130+ Fix from $1,9502026-03-25 HIGH 7.8 CVE-2026-23306 In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001_queue_command() Commit e29c47fe8946 … Linux Kernel 6.1.167 / 6.6.130+ Fix from $1,9502026-03-25 HIGH 7.8 CVE-2026-23281 In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbs_free_adapter() The lbs_free_adapter()… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-03-25 MEDIUM 6.5 CVE-2026-28879 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, … Ipados 14.8.5 / 15.7.5+ Fix from $1,6002026-03-25 MEDIUM 6.5 CVE-2026-28857 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4.… Safari 26.4+ Fix from $1,6002026-03-25 MEDIUM 6.5 CVE-2026-28835 A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 2… macOS 14.8.5 / 15.7.5+ Fix from $1,6002026-03-25 HIGH 7.1 CVE-2026-20687 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, … Ipados 15.7.5 / 18.7.7+ Fix from $1,9502026-03-25 MEDIUM 6.2 CVE-2026-20637 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, … Ipados 14.8.5 / 15.7.5+ Fix from $1,6002026-03-25 CRITICAL 9.8 CVE-2026-4723 Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. Firefox 149.0+ Fix from $2,3002026-03-24 CRITICAL 10.0 CVE-2026-4725 Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149. Firefox 149.0+ Fix from $2,3002026-03-24 CRITICAL 9.8 CVE-2026-4711 Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Firefox 140.9.0 / 149.0+ Fix from $2,3002026-03-24 CRITICAL 9.8 CVE-2026-4701 Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 1… Firefox 140.9.0 / 149.0+ Fix from $2,3002026-03-24 CRITICAL 9.8 CVE-2026-4696 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbi… Firefox 115.34.0 / 140.9.0+ Fix from $2,3002026-03-24 HIGH 7.5 CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140… Firefox 115.34.0 / 140.9.0+ Fix from $1,9502026-03-24 CRITICAL 10.0 CVE-2026-4688 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunder… Firefox 140.9.0 / 149.0+ Fix from $2,3002026-03-24 CRITICAL 9.8 CVE-2026-4691 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thun… Firefox 115.34.0 / 140.9.0+ Fix from $2,3002026-03-24 MEDIUM 6.4 CVE-2026-4752 Use After Free vulnerability in No-Chicken Echo-Mate.This issue affects Echo-Mate: before V250329. Patch available Fix from $1,6002026-03-24 HIGH 7.3 CVE-2026-4737 Use After Free vulnerability in No-Chicken Echo-Mate (‎SDK/rv1106-sdk/sysdrv/source/kernel/mm modules). This vulnerability is associated with program… Patch available Fix from $1,9502026-03-24 HIGH 8.8 CVE-2026-4676 Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML … Chrome 146.0.7680.164+ Fix from $1,9502026-03-24 HIGH 8.8 CVE-2026-4678 Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted … Chrome 146.0.7680.164+ Fix from $1,9502026-03-24 HIGH 8.8 CVE-2026-4680 Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… Chrome 146.0.7680.164+ Fix from $1,9502026-03-24 MEDIUM 6.2 CVE-2026-30007 XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file Nconvert No fix yet Fix from $1,6002026-03-23 HIGH 7.8 CVE-2026-33150 libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the io_uri… Libfuse 3.18.2+ Fix from $1,9502026-03-20 HIGH 7.8 CVE-2026-23273 In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_common_newlink() error path val… Linux Kernel 5.10.252 / 5.15.202+ Fix from $1,9502026-03-20