Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_op…Check if you run itEPSS 0.13%Apr 2, 2026
- High8.2ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.12%Apr 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: defer hook memory release until rcu readers are done Yiming Qian reports UaF when c…Check if you run itEPSS 0.12%Apr 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emu…Check if you run itEPSS 0.18%Apr 1, 2026
- Critical9.6Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sand…Check if you run itEPSS 0.31%Apr 1, 2026
- Critical9.6Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…Check if you run itEPSS 0.31%Apr 1, 2026
- Critical9.6Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform…Check if you run itEPSS 0.31%Apr 1, 2026
- High8.8Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.Check if you run itEPSS 0.34%Apr 1, 2026
- High8.8Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.36%Apr 1, 2026
- High8.8Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.46%Apr 1, 2026
- High7.5Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a craf…Check if you run itEPSS 0.34%Apr 1, 2026
- High8.8Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.46%Apr 1, 2026
- High8.8Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.46%Apr 1, 2026
- Medium6.3Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Apr 1, 2026
- High7.8The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to…Check if you run itEPSS 0.22%Apr 1, 2026
- High7.8The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state.Check if you run itEPSS 0.17%Apr 1, 2026
- High7.5An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code.Check if you run itEPSS 1.34%Mar 31, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 0.70%Mar 31, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.38%Mar 27, 2026
- Medium6.5Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS.Check if you run itEPSS 0.21%Mar 27, 2026
- High7.5LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 1.05%Mar 26, 2026
- Medium5.5EVerest is an EV charging software stack.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium5.3EVerest is an EV charging software stack.Check if you run itEPSS 0.18%Mar 26, 2026
- Medium4.2EVerest is an EV charging software stack.Check if you run itEPSS 0.14%Mar 26, 2026
- Critical9.2Squid is a caching proxy for the Web.Check if you run itEPSS 8.94%Mar 26, 2026