Total
8659 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-77358 | 2026-09-09 | N/A | N/A | ||
| cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdown_and_close the SSL object is freed and the pointer cleared, but the subsequent WebSocket close still sends a close frame through the SSL socket stream, which holds a raw copy of the now-dangling session pointer and reads from and writes to the freed memory. The same freed-then-used ordering is reachable through the client's destructor and its connect path, so ordinary teardown of a secure WebSocket connection triggers the defect. This issue is fixed in version 0.50.1. | |||||
| CVE-2026-33630 | 2026-09-09 | N/A | 7.5 HIGH | ||
| c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple points in the resend/finish path (timeout handling, response handling, and query dispatch). If the query, or for ares_getaddrinfo() the owning host_query, is freed as a side effect of that callback, it is then accessed and/or freed a second time. This vulnerability is fixed in ver 1.34.7. | |||||
| CVE-2026-59184 | 2026-09-09 | N/A | 7.1 HIGH | ||
| OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14. | |||||
| CVE-2026-73071 | 2026-09-09 | N/A | 3.3 LOW | ||
| Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channel_fill() to refill and free the current buffer, causing the error path to read freed memory instead of reader->js_buf + reader->js_used when an invalid JSON string spans buffers. This issue is fixed in version 9.2.0844. | |||||
| CVE-2026-87657 | 1 Google | 1 Chrome | 2026-09-09 | N/A | 3.1 LOW |
| Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-85360 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-09-09 | N/A | 7.0 HIGH |
| Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-70582 | 2026-09-09 | N/A | 6.4 MEDIUM | ||
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69782 | 2026-09-09 | N/A | 8.1 HIGH | ||
| Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69711 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-87877 | 2026-09-09 | N/A | 7.7 HIGH | ||
| zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM. | |||||
| CVE-2026-69632 | 1 Microsoft | 5 365 Apps, Microsoft 365, Office 2019 and 2 more | 2026-09-09 | N/A | 8.8 HIGH |
| Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-72981 | 2026-09-09 | N/A | 8.1 HIGH | ||
| Use after free in IP Helper allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-72979 | 2026-09-09 | N/A | 9.8 CRITICAL | ||
| Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69693 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69576 | 2026-09-09 | N/A | 7.8 HIGH | ||
| Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69488 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69451 | 2026-09-09 | N/A | 7.1 HIGH | ||
| Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-69357 | 2026-09-09 | N/A | 7.1 HIGH | ||
| Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-80081 | 1 Microsoft | 1 365 Apps | 2026-09-09 | N/A | 8.8 HIGH |
| Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69678 | 1 Microsoft | 6 365 Apps, Microsoft 365, Office 2019 and 3 more | 2026-09-09 | N/A | 8.8 HIGH |
| Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | |||||