Total
8652 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-70577 | 2026-09-11 | N/A | 7.0 HIGH | ||
| Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69605 | 2026-09-11 | N/A | 7.0 HIGH | ||
| Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69472 | 2026-09-11 | N/A | 7.0 HIGH | ||
| Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69396 | 2026-09-11 | N/A | 7.1 HIGH | ||
| Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-69296 | 2026-09-11 | N/A | 7.1 HIGH | ||
| Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-45447 | 1 Openssl | 1 Openssl | 2026-09-11 | N/A | 8.8 HIGH |
| Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition. In the common case this occurs when the application later calls BIO_free() on the BIO originally passed to PKCS7_verify(). Depending on allocator behavior and application-specific BIO usage patterns, this may result in a crash or other memory corruption. In some application contexts this may potentially be exploitable for remote code execution. Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected. Applications using the CMS APIs for this processing are not affected. The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary. | |||||
| CVE-2026-69911 | 2026-09-11 | N/A | 7.0 HIGH | ||
| Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69600 | 2026-09-11 | N/A | 7.0 HIGH | ||
| Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-21102 | 1 Samsung | 1 Android | 2026-09-11 | N/A | 6.7 MEDIUM |
| Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege. | |||||
| CVE-2026-88032 | 2026-09-11 | N/A | 5.9 MEDIUM | ||
| A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the hosting application process to terminate. Reaching the issue requires an affected reactive encryption configuration that retrieves KMS credentials on demand. | |||||
| CVE-2026-69814 | 2026-09-10 | N/A | 7.0 HIGH | ||
| Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69791 | 2026-09-10 | N/A | 7.0 HIGH | ||
| Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69281 | 2026-09-10 | N/A | 7.0 HIGH | ||
| Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69244 | 2026-09-10 | N/A | N/A | ||
| AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigger a DoS in the client. The vulnerable path was error message construction in aiohttp/_http_parser.pyx, where an llhttp error-position pointer was used to build a snippet for malformed chunked responses and malformed request or response bytes at the buffer end. This issue is fixed in version 3.14.3. | |||||
| CVE-2026-87933 | 2026-09-10 | 7.5 HIGH | 7.3 HIGH | ||
| A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch of the file cJSON_Utils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance. | |||||
| CVE-2026-9034 | 2026-09-10 | N/A | 7.8 HIGH | ||
| Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Bifrost GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p3; Valhall GPU Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r42p0 through r49p5, from r50p0 through r54p3, r55p0. | |||||
| CVE-2026-7477 | 2026-09-10 | N/A | 7.8 HIGH | ||
| Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r44p0 through r49p4, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r44p0 through r49p5, from r50p0 through r54p3; Arm 5th Gen GPU Architecture Kernel Driver: from r44p0 through r49p5, from r50p0 through r54p3, r55p0. | |||||
| CVE-2026-7476 | 2026-09-10 | N/A | 7.8 HIGH | ||
| Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r49p3 through r49p5, r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r49p3 through r49p5, from r51p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r49p3 through r49p5, from r51p0 through r54p3, r55p0. | |||||
| CVE-2026-5729 | 2026-09-10 | N/A | 7.8 HIGH | ||
| Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory. This issue affects Valhall GPU Kernel Driver: from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r50p0 through r54p3, r55p0. | |||||
| CVE-2026-11891 | 2026-09-10 | N/A | 5.1 MEDIUM | ||
| Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GPU Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Userspace Driver: from r46p0 through r49p5, from r50p0 through r54p3, r55p0. | |||||