Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.2%Oct 13, 2026
- High8.3Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code o…EPSS 0.2%Oct 13, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.2%Oct 13, 2026
- Critical9.6Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.EPSS 0.2%Oct 13, 2026
- High7.0Use after free in SQL Server allows an authorized attacker to elevate privileges locally.EPSS 0.2%Oct 13, 2026
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliEPSS 0.3%Oct 13, 2026
- Medium5.9The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails.EPSS 0.2%Oct 13, 2026
- High8.9Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.EPSS 0.2%Oct 12, 2026
- Critical9.1IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…EPSS 0.2%Oct 8, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.5%Oct 6, 2026
- High8.8Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- Critical9.6Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.EPSS 0.4%Oct 6, 2026
- High7.0Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.EPSS 0.3%Sep 8, 2026
- High7.6A flaw was found in libsoup.EPSS 0.3%Sep 4, 2026
- High8.8A flaw was found in WebKitGTK.EPSS 0.3%Aug 24, 2026
- High8.3Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in se…EPSS 0.2%Aug 21, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityKEVEPSS 0.3%Aug 11, 2026
- High7.8ipv4: igmp: remove multicast group from hash table on device destructionJul 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netli…Jul 19, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb ieee80211_invoke_fast_rx() reads RX…Jul 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a race condition with OMAPFB_SETU…Jul 19, 2026
- High7.0Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.EPSS 0.3%Jul 14, 2026
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.EPSS 0.3%Jul 14, 2026
- High7.0Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.EPSS 0.3%Jul 14, 2026