Export limit exceeded: 10770 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 12101 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (12101 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-120811 | 2026-11-10 | 5.9 Medium | ||
| A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, an unowned reference to data from an earlier command can be retained in cached plan statistics. After the originating memory is freed, a subsequent diagnostic command serializing those statistics can read freed heap memory, potentially returning sensitive server process memory contents to the authenticated client. Under certain heap reuse conditions, this may also cause the server to crash. | ||||
| CVE-2026-120809 | 2026-11-10 | 6.8 Medium | ||
| A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines with $unwind on time-series collections. An internal error in state-preservation logic can cause a value still referenced by downstream stages to have its underlying memory freed prematurely. An authenticated user can craft an aggregation pipeline under specific conditions to trigger this condition, potentially reading recycled server heap memory in query results or crashing the server. This issue is only triggerable when a non-default server parameter related to the SBE engine is enabled. | ||||
| CVE-2026-120803 | 2026-11-10 | 7.1 High | ||
| A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator used by certain $setWindowFields aggregation pipelines. Under specific conditions, the accumulator can retain a dangling pointer to memory that has since been freed. When this stale pointer is later dereferenced during serialization of the carried-forward value, it can result in a heap out-of-bounds read that may expose adjacent heap contents and crash the mongod server. An authenticated user with readWrite privileges on a database can trigger this issue by crafting a specific aggregation pipeline. | ||||
| CVE-2026-13595 | 3 Kernel, Linux, Redhat | 10 Util-linux, Util-linux, Cost Management On Premise and 7 more | 2026-11-10 | 6.8 Medium |
| A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service. | ||||
| CVE-2026-58927 | 1 Google | 1 Android | 2026-11-10 | 6.7 Medium |
| The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls from a privileged UID (e.g., `AID_AUTOMOTIVE_EVS`) can cause a torn `weak_ptr` state, leading to a virtual call through a freed object's vtable at `cameraObj->getCameraInfo(&desc)`. This allows for potential arbitrary code execution within the `hal_evs_default` process. | ||||
| CVE-2026-124943 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124908 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124904 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124900 | 2026-11-10 | 9.6 Critical | ||
| Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124878 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124871 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124867 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-82418 | 1 Ibm | 1 Watson Speech Services Cartridge | 2026-11-10 | 9.8 Critical |
| IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability. | ||||
| CVE-2026-118732 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-10 | 8.8 High |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-118730 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-10 | 8.8 High |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-118729 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-10 | 8.8 High |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-118719 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-10 | 8.8 High |
| Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-118716 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-10 | 8.8 High |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-118713 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-10 | 8.8 High |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-118710 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-11-10 | 8.8 High |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||