Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.5Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve…Oct 9, 2026
- Critical9.1IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…EPSS 0.3%Oct 8, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.5%Oct 6, 2026
- High8.8Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.4%Oct 6, 2026
- Critical9.6Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.EPSS 0.5%Oct 6, 2026
- High7.0Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.EPSS 0.3%Sep 8, 2026
- High7.6A flaw was found in libsoup.EPSS 0.3%Sep 4, 2026
- High8.8A flaw was found in WebKitGTK.EPSS 0.3%Aug 24, 2026
- High8.3Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in se…EPSS 0.2%Aug 21, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityKEVEPSS 0.3%Aug 11, 2026
- High7.8ipv4: igmp: remove multicast group from hash table on device destructionEPSS 0.1%Jul 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netli…EPSS 0.1%Jul 19, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb ieee80211_invoke_fast_rx() reads RX…EPSS 0.2%Jul 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a race condition with OMAPFB_SETU…EPSS 0.1%Jul 19, 2026
- High7.0Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.EPSS 0.3%Jul 14, 2026
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.EPSS 0.3%Jul 14, 2026
- High7.0Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.EPSS 0.3%Jul 14, 2026
- High7.8Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.EPSS 0.3%Jul 14, 2026
- High7.0Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.EPSS 0.3%Jul 14, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.EPSS 0.2%Jul 14, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTE…EPSS 0.2%Jun 25, 2026
- High8.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() rfcomm_get_sock_by_channel() scans…EPSS 0.3%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() Fix the race by pruning…EPSS 0.1%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_destroy() calls metadata…EPSS 0.2%Jun 25, 2026