WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-416✕
Overview 10,103 matches · 8 in Waratek scope · 1 protected · 134 exploited · 109 CISA KEV · 230 public PoC · 71 EPSS ≥ 0.5
10,103matches 8in Waratek scope0.1% 1protected0.0% 134exploited1.3% 109CISA KEV1.1% 230public PoC2.3% 71EPSS ≥ 0.50.7%
Protected by Waratek 1 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 7 0.1% Outside Waratek scope 56 0.6% Not applicable 10,039 99.4% Withdrawn CVE 0 0.0%
Critical 1,132 11.2% High 7,490 74.1% Medium 1,350 13.4% Low 128 1.3% None 0 0.0% Unknown 3 0.0%
blocked by ARMR today 1 0.0% partly blocked 0 0.0% not blocked 10,102 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 134 1.3% Working exploit published 100 1.0% Proof of concept only 393 3.9% Forecast only 22 0.2% No public exploit 9,454 93.6%
split by peak 3,681 / year
Not applicable: 10,039Outside Waratek scope: 56No exploit published: 7Protected by Waratek: 1 Unknown: 3Low: 128Medium: 1,350High: 7,490Critical: 1,132 not blocked: 10,102blocked by ARMR today: 1 No public exploit: 9,454Forecast only: 22Proof of concept only: 393Working exploit published: 100Exploited: 134
20062 Not applicable2 High2 not blocked2 Exploited1 No public exploit1 20071 Not applicable1 High1 not blocked1 No public exploit1 20083 Not applicable3 Critical1 High1 Medium1 not blocked3 No public exploit3 20098 Not applicable8 Critical1 High6 Medium1 not blocked8 Exploited1 Working exploit published1 No public exploit6 201029 Not applicable29 Critical3 High23 Medium3 not blocked29 Exploited3 Working exploit published4 No public exploit22 201156 Not applicable56 High28 Medium28 not blocked56 No public exploit56 201281 Not applicable81 Critical1 High48 Medium32 not blocked81 Exploited2 Working exploit published1 No public exploit78 201342 Not applicable42 Critical4 High36 Medium2 not blocked42 Exploited4 Working exploit published4 No public exploit34 201430 Not applicable30 Critical3 High19 Medium6 Low2 not blocked30 Exploited4 Working exploit published2 No public exploit24 201545 Not applicable45 Critical4 High29 Medium12 not blocked45 Exploited5 Working exploit published5 No public exploit35 2016157 Not applicable157 Critical42 High103 Medium12 not blocked157 Exploited3 Working exploit published18 Forecast only1 No public exploit135 2017295 Outside Waratek scope1 Not applicable294 Critical48 High196 Medium51 not blocked295 Exploited3 Working exploit published18 Proof of concept only2 No public exploit272 2018432 Outside Waratek scope1 Not applicable431 Critical114 High279 Medium38 Low1 not blocked432 Exploited2 Working exploit published16 Proof of concept only3 Forecast only1 No public exploit410 2019574 Outside Waratek scope18 Not applicable556 Critical122 High351 Medium99 Low2 not blocked574 Exploited10 Working exploit published20 Proof of concept only2 Forecast only2 No public exploit540 2020380 Outside Waratek scope11 Not applicable369 Critical59 High241 Medium76 Low4 not blocked380 Exploited6 Working exploit published2 Proof of concept only4 Forecast only1 No public exploit367 2021557 No exploit published2 Outside Waratek scope9 Not applicable546 Critical57 High408 Medium84 Low8 not blocked557 Exploited24 Proof of concept only4 Forecast only13 No public exploit516 2022732 No exploit published1 Outside Waratek scope5 Not applicable726 Critical44 High536 Medium146 Low6 not blocked732 Exploited10 Working exploit published1 Proof of concept only53 No public exploit668 2023645 Outside Waratek scope2 Not applicable643 Critical34 High473 Medium136 Low2 not blocked645 Exploited14 Working exploit published2 Proof of concept only78 Forecast only3 No public exploit548 20241,264 No exploit published1 Outside Waratek scope2 Not applicable1,261 Critical113 High1,025 Medium111 Low15 not blocked1,264 Exploited18 Proof of concept only58 Forecast only1 No public exploit1,187 20251,089 Outside Waratek scope3 Not applicable1,086 Critical55 High916 Medium94 Low24 not blocked1,089 Exploited18 Working exploit published5 Proof of concept only43 No public exploit1,023 20263,681 Protected by Waratek1 No exploit published3 Outside Waratek scope4 Not applicable3,673 Critical427 High2,769 Medium418 Low64 Unknown3 blocked by ARMR today1 not blocked3,680 Exploited6 Working exploit published1 Proof of concept only146 No public exploit3,528
20062008201020122014201620182020202220242026
10,103 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 102 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-95691 Unknown 2026-11-10 Not applicable No public exploit Issue summary: A retransmitted QUIC CRYPTO frame can release packet storage while the TLS record layer retains a direct pointer into that storage causing use after free. Impact summary: A malicious QUIC server can cause a heap-use-after-free read in the OpenSSL QUIC client. The server can also identify one allocator-adjacent byte through the client's protected Handshake response. CWE: CWE-416: Use After Free Description: During CRYPTO stream processing, a pointer into the first frame's memory on the stream is lent to the TLS handshake processing. The memory must remain stable until it is processed and released. However the processing of retransmitted CRYPTO frames could release the memory if the retransmitted frame fully overlapped the existing frame. This then causes use-after-free read when the TLS handshake processing continues. The use-after-free read can lead to a Denial-of-Service of the client application or a minor leak of information about the heap memory contents that might be overwritten with other data, subsequently allocated by the application, to the peer. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.
CVE-2026-94522 High 2026-11-10 Not applicable No public exploit Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-94519 High 2026-11-10 Not applicable No public exploit Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88249 High 2026-11-10 Not applicable No public exploit Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network.
CVE-2026-88244 High 2026-11-10 Not applicable No public exploit Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-88242 High 2026-11-10 Not applicable No public exploit Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-88237 High 2026-11-10 Not applicable No public exploit Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-88232 High 2026-11-10 Not applicable No public exploit Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-88221 High 2026-11-10 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88215 Medium 2026-11-10 Not applicable No public exploit Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.
CVE-2026-88212 High 2026-11-10 Not applicable No public exploit Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-85862 High 2026-11-10 Not applicable No public exploit Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-85801 High 2026-11-10 Not applicable No public exploit Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83894 High 2026-11-10 Not applicable No public exploit Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVE-2026-80094 High 2026-11-10 Not applicable No public exploit Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-72998 High 2026-11-10 Not applicable No public exploit Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-70231 High 2026-11-10 Not applicable No public exploit Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-70120 High 2026-11-10 Not applicable No public exploit Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69565 High 2026-11-10 Not applicable No public exploit Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.
CVE-2026-69327 High 2026-11-10 Not applicable No public exploit Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.
CVE-2026-61467 Medium 2026-11-10 Not applicable No public exploit Use after free in the MigTD virtio driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2026-59626 Critical 2026-11-10 Not applicable No public exploit In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59609 High 2026-11-10 Not applicable No public exploit In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59603 High 2026-11-10 Not applicable No public exploit In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retry handling due to a use after free. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59598 High 2026-11-10 Not applicable No public exploit In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-58800 Critical 2026-11-10 Not applicable No public exploit In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58736 Critical 2026-11-10 Not applicable No public exploit In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response queue due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56969 High 2026-11-10 Not applicable No public exploit In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-56944 High 2026-11-10 Not applicable No public exploit In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use After Free due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56938 High 2026-11-10 Not applicable No public exploit In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-55335 Critical 2026-11-10 Not applicable No public exploit In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-44625 Medium 2026-11-10 Not applicable No public exploit Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2026-40697 Medium 2026-11-10 Not applicable No public exploit Use after free for some Intel(R) Wireless Software for Windows within Ring 3: User Applications may allow denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (low) and availability (low) impacts.
CVE-2026-40427 Medium 2026-11-10 Not applicable No public exploit Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2026-126064 Low 2026-11-10 Not applicable No public exploit Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node#[]= or Nokogiri::XML::Node#lang= replaces an existing attribute value after code has accessed the attribute's child nodes. Replacing the value frees native child nodes while their wrappers remain reachable, and later use of those wrappers can cause an invalid read or process segfault. JRuby is not affected. This issue is fixed in version 1.19.5.
CVE-2026-126049 Medium 2026-11-10 Not applicable No public exploit Gwenhywfar 5.14.2 contains a heap use-after-free vulnerability in GWEN_TLV_Buffer_To_DB() in src/parser/tlv.c, which frees a nested record's GWEN_DB node when parsing of its contents fails but continues processing and adds the freed node to the parent instead of returning. Attackers can supply a constructed BER-TLV record with unparseable contents, such as via a malicious chip card read by libchipcard, to corrupt heap memory.
CVE-2026-125704 High 2026-11-10 Not applicable No public exploit A use-after-free flaw was found in GStreamer core buffer value deserialization. When serialized buffer text contains an invalid character, an error path frees a mapped buffer before unmapping it. Applications that parse untrusted caps or structure data can reach a freed-buffer read and may crash. A network-facing GStreamer Data Protocol receiver can process such caps data without user interaction; further impact has not been established.
CVE-2026-125400 High 2026-11-10 Not applicable No public exploit Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcre_regex() substitution filter to corrupt memory and potentially execute code as root.
CVE-2026-125394 Medium 2026-11-10 Not applicable Proof of concept only FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and update_gdi_mem3blt() that retain stale brush cache pointers. A malicious RDP server can resend CACHE_BRUSH to the same slot then send PATBLT, causing clients to read freed heap memory, disclosing data or crashing.
CVE-2026-125350 High 2026-11-10 Not applicable Exploited Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125134 High 2026-11-10 Not applicable No public exploit Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-124952 High 2026-11-10 Not applicable No public exploit Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
CVE-2026-124948 High 2026-11-10 Not applicable No public exploit Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124943 High 2026-11-10 Not applicable No public exploit Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124932 High 2026-11-10 Not applicable No public exploit Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124922 High 2026-11-10 Not applicable No public exploit Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124919 High 2026-11-10 Not applicable No public exploit Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124917 Critical 2026-11-10 Not applicable No public exploit Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124908 High 2026-11-10 Not applicable No public exploit Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124907 High 2026-11-10 Not applicable No public exploit Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124906 High 2026-11-10 Not applicable No public exploit Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124904 High 2026-11-10 Not applicable No public exploit Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124903 Critical 2026-11-10 Not applicable No public exploit Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124900 Critical 2026-11-10 Not applicable No public exploit Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124899 High 2026-11-10 Not applicable No public exploit Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124898 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124897 High 2026-11-10 Not applicable No public exploit Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124895 High 2026-11-10 Not applicable No public exploit Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124894 High 2026-11-10 Not applicable No public exploit Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124893 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124892 High 2026-11-10 Not applicable No public exploit Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124890 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124889 High 2026-11-10 Not applicable No public exploit Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124885 High 2026-11-10 Not applicable No public exploit Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124884 High 2026-11-10 Not applicable No public exploit Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124883 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124882 High 2026-11-10 Not applicable No public exploit Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124881 High 2026-11-10 Not applicable No public exploit Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124880 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124878 High 2026-11-10 Not applicable No public exploit Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124877 High 2026-11-10 Not applicable No public exploit Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124876 High 2026-11-10 Not applicable No public exploit Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124872 High 2026-11-10 Not applicable No public exploit Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124871 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124869 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124867 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124866 High 2026-11-10 Not applicable No public exploit Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124865 High 2026-11-10 Not applicable No public exploit Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124864 Critical 2026-11-10 Not applicable No public exploit Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124863 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124862 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124861 Critical 2026-11-10 Not applicable No public exploit Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124860 High 2026-11-10 Not applicable No public exploit Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124858 High 2026-11-10 Not applicable No public exploit Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124857 High 2026-11-10 Not applicable No public exploit Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124187 High 2026-11-10 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-123389 High 2026-11-10 Not applicable No public exploit Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
CVE-2026-122175 High 2026-11-10 Not applicable No public exploit Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-122172 High 2026-11-10 Not applicable No public exploit Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
CVE-2026-122170 High 2026-11-10 Not applicable No public exploit Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-121673 High 2026-11-10 Not applicable No public exploit Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-121671 High 2026-11-10 Not applicable No public exploit Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-120824 High 2026-11-10 Not applicable No public exploit A use-after-free in the time-series collection component of MongoDB Server can occur when the server validates a time-series bucket document during a write. The condition can be caused by an authenticated user with privileges to write bucket documents directly, and may result in the server terminating unexpectedly or, under certain conditions, arbitrary code execution in the context of the server process.
CVE-2026-120821 High 2026-11-10 Not applicable No public exploit A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an aggregation sub-pipeline. The condition can be caused by an authenticated user with read privileges, and may result in the server terminating unexpectedly.
CVE-2026-120819 Medium 2026-11-10 Not applicable No public exploit A memory-management flaw in the server-side JavaScript execution component of MongoDB Server can allow an authenticated user holding only read privileges to cause the server to access memory that has already been released. By submitting a specially crafted database command that runs user-supplied JavaScript, the user can cause a bounded amount of adjacent process memory to be returned in the command's result. This results in the user obtaining information they are not authorized to access. Integrity and availability are not affected.
CVE-2026-120818 High 2026-11-10 Not applicable No public exploit A use-after-free weakness in MongoDB Server's server-side JavaScript support for aggregation may allow a stale reference to previously freed process memory to be read and returned. An authenticated user with minimal or no assigned roles can trigger this condition over the normal network protocol by submitting a single crafted aggregation request, with no additional privileges or non-default configuration. Successful triggering this issue may result in adjacent process memory contents being returned, including data that undermines memory-layout randomization, and may in some cases affect server availability.
CVE-2026-120811 Medium 2026-11-10 Not applicable No public exploit A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, an unowned reference to data from an earlier command can be retained in cached plan statistics. After the originating memory is freed, a subsequent diagnostic command serializing those statistics can read freed heap memory, potentially returning sensitive server process memory contents to the authenticated client. Under certain heap reuse conditions, this may also cause the server to crash.
CVE-2026-120809 Medium 2026-11-10 Not applicable No public exploit A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines with $unwind on time-series collections. An internal error in state-preservation logic can cause a value still referenced by downstream stages to have its underlying memory freed prematurely. An authenticated user can craft an aggregation pipeline under specific conditions to trigger this condition, potentially reading recycled server heap memory in query results or crashing the server. This issue is only triggerable when a non-default server parameter related to the SBE engine is enabled.
CVE-2026-120803 High 2026-11-10 Not applicable No public exploit A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator used by certain $setWindowFields aggregation pipelines. Under specific conditions, the accumulator can retain a dangling pointer to memory that has since been freed. When this stale pointer is later dereferenced during serialization of the carried-forward value, it can result in a heap out-of-bounds read that may expose adjacent heap contents and crash the mongod server. An authenticated user with readWrite privileges on a database can trigger this issue by crafting a specific aggregation pipeline.
CVE-2026-119967 High 2026-11-10 Not applicable No public exploit Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
‹ prev page 2 of 102 next ›