Base de CVEs

CVE-2026-110599 Alta · 7.1 CWE-415 14/10/2026

L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probe

L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to lsmash_read_file() or the boxdumper, remuxer, or muxer tools, causing use-after-free, heap corruption, and crashes.

CVE-2026-94370 Média · 6.5 CWE-415 14/10/2026

Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs

A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string type copies the pointer without taking ownership of it. Two objects then release the same memory, producing a double free, an invalid free, or a use-after-free.

CVE-2026-95635 Alta · 7.8 CWE-415 13/10/2026

Photoshop Desktop | Double Free (CWE-415)

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-97830 Alta · 7.5 CWE-415 13/10/2026

Windows Internet Information Services Denial of Service Vulnerability

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

CVE-2026-97812 Alta · 7.0 CWE-415 13/10/2026

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97772 Alta · 8.8 CWE-415 13/10/2026

Microsoft Office Excel Remote Code Execution Vulnerability

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97767 Alta · 8.8 CWE-415 13/10/2026

Microsoft Office Excel Remote Code Execution Vulnerability

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-97749 Crítica · 9.8 CWE-415 13/10/2026

Microsoft Office Outlook Remote Code Execution Vulnerability

Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-96864 Crítica · 9.8 CWE-415 13/10/2026

Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-95943 Alta · 7.0 CWE-415 13/10/2026

Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-88171 Alta · 8.1 CWE-415 13/10/2026

Windows DHCP Server Remote Code Execution Vulnerability

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88149 Alta · 7.0 CWE-415 13/10/2026

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-88071 Alta · 7.8 CWE-415 13/10/2026

Windows Hyper-V Elevation of Privilege Vulnerability

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-85829 Alta · 7.8 CWE-415 13/10/2026

Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

CVE-2026-84012 Alta · 8.1 CWE-415 13/10/2026

Windows Remote Desktop Services Remote Code Execution Vulnerability

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-83916 Alta · 7.0 CWE-415 13/10/2026

Windows Error Reporting Remote Code Execution Vulnerability

Double free in Windows Error Reporting allows an authorized attacker to execute code locally.

CVE-2026-83842 Alta · 7.0 CWE-415 13/10/2026

Windows TCP/IP Elevation of Privilege Vulnerability

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83634 Alta · 7.8 CWE-415 13/10/2026

Windows BitLocker Elevation of Privilege Vulnerability

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-70158 Alta · 8.8 CWE-415 13/10/2026

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

CVE-2026-70062 Alta · 8.1 CWE-415 13/10/2026

Windows libarchive Remote Code Execution Vulnerability

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-108132 Alta · 7.0 CWE-415 13/10/2026

Windows Kerberos Elevation of Privilege Vulnerability

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-106175 Baixa · 2.3 CWE-415 13/10/2026

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7,...

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.

CVE-2026-104192 Crítica · 9.6 CWE-415 13/10/2026

DragonflyDB: double-free na desserialização de stream RDB

Dragonfly é um armazenamento de dados em memória criado para cargas de trabalho modernas de aplicações. Antes da versão 1.40, OpaqueObjLoader::CreateStream em src/server/rdb_load.cc pode associar um streamNACK à PEL global de um grupo de consumidores e a uma PEL local de consumidor, e depois liberar o objeto compartilhado quando uma entrada duplicada de consumidor é rejeitada. A limpeza posteriormente libera o mesmo objeto novamente. Na configuração padrão, em que o Dragonfly é distribuído com a autenticação desabilitada, um cliente não autenticado pode acionar o double-free enviando um stream serializado malformado para RESTORE, causando corrupção do alocador, negação de serviço e, potencialmente, execução de código controlada pelo atacante como a conta de serviço do Dragonfly. A correção no código-fonte ainda não foi associada a uma versão publicada.

CVE-2026-109943 Média · 6.5 CWE-415 13/10/2026

FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order

FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points array when numPoints is zero, so both the queue consumer and parser cleanup free it. A malicious RDP server can send a point-bearing polygon order followed by a zero-point order to crash a client with +async-update enabled.

CVE-2026-109271 Baixa · 3.7 CWE-415 12/10/2026

ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder

ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused, crashing the application.