CVE Database

CVE-2026-103622 High · 8.8 CWE-416 Oct 2, 2026

Use After Free in Google Chrome

Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-103623 High · 8.8 CWE-416 Oct 2, 2026

Use After Free in Google Chrome

Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-73637 High · 7.3 CWE-416 Oct 1, 2026

Apache HTTP Server: mod_auth_digest DoS attack

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.

CVE-2026-57941 Critical · 9.8 CWE-416 Oct 1, 2026

Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy

Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154 Critical · 9.8 CWE-416 Oct 1, 2026

Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-103679 Medium · 6.5 CWE-416 Oct 1, 2026

Tnef: use-after-free and double-free in get_body_files() via multi-value body extraction

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition, causing the application to crash and resulting in a Denial of Service (DoS).

CVE-2026-101276 Critical · 9.2 CWE-416 Sep 30, 2026

Use After Free in Esnet Iperf3

iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.

CVE-2026-19445 Critical · 9.2 Public exploit CWE-416 Sep 30, 2026

Use-after-free of a server-side SSLContext when sni_callback switches contexts

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else keeps the original ssl.SSLContext alive. Typical cases are servers that create an SSLContext per connection or replace it while connections are open; servers that wrap their listening socket with it are not affected. Mitigation: keep a reference to every SSLContext that sets sni_callback for the lifetime of the server. TLS clients are not affected.

CVE-2026-47598 High · 7.0 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47597 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free through a missing self-reference guard in the map cleanup path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47594 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information disclosure.

CVE-2026-47590 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and information disclosure.

CVE-2026-47589 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and information disclosure.

CVE-2026-47588 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA NVIDIA RTX, Quadro, NVS

NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service and information disclosure.

CVE-2026-47587 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA NVIDIA RTX, Quadro, NVS

NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47586 Medium · 6.4 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel module where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2026-47579 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

The NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode driver through which a user might trigger a use-after-free condition. Successful exploitation of this issue could lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47560 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2026-47551 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2026-47516 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVE-2026-47505 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, or escalation of privileges, information disclosure, and data tampering.

CVE-2026-47500 High · 7.8 CWE-416 Sep 30, 2026

Use After Free in NVIDIA GeForce

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead to a use-after-free condition. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2026-74222 High · 8.2 CWE-416 Sep 29, 2026

U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERR_BUF instead of ERR_ABRT, causing the TCP input path to access released memory and crash the bootloader.

CVE-2026-102324 High · 8.3 CWE-416 Sep 29, 2026

Use After Free in Google Chrome

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-102316 Critical · 9.6 CWE-416 Sep 29, 2026

Use After Free in Google Chrome

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)