use after free Archives • Daily CyberSecurity

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation

Do Son August 18, 2026

TL;DR A researcher released proof-of-concept exploit code for CVE-2026-68138, a race condition in the Linux kernel traffic-control...

CVE-2026-64582: PoC Exploit Published for Kernel LPE Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

CVE-2026-64582: PoC Exploit Published for Kernel LPE

Do Son August 14, 2026

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is...

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed MariaDB remote code execution low-privilege RCE exploit chain with public proof-of-concept code

MariaDB remote code execution low-privilege RCE exploit chain with public proof-of-concept code

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026

TL;DR Researchers at V12 Security published a MariaDB remote code execution chain. It runs commands as the...

Chrome Update Fixes 5 Use-After-Free Security Bugs Chrome security update patching use-after-free flaws CVE-2026-19556 and CVE-2026-19560 on a browser screen

Chrome security update patching use-after-free flaws CVE-2026-19556 and CVE-2026-19560 on a browser screen

Chrome Update Fixes 5 Use-After-Free Security Bugs

Do Son August 12, 2026

TL;DR Google shipped a new Chrome security update on the Stable channel. It fixes five high-severity use-after-free...

Linux kernel CPU timer flaw CVE-2026-64560 use-after-free giving a root shell, with public PoC exploit code

CVE-2026-64560: Linux Kernel CPU Timer Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Do Son August 12, 2026

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it...

CVE-2026-43074: Linux Kernel eventpoll Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed Linux kernel eventpoll flaw CVE-2026-43074 use-after-free giving a root shell, with public PoC exploit code

Linux kernel eventpoll flaw CVE-2026-43074 use-after-free giving a root shell, with public PoC exploit code

CVE-2026-43074: Linux Kernel eventpoll Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Do Son August 10, 2026

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it...

CVE-2026-64564: SCTP Flaw Enables Container Escape Linux SCTP kernel use-after-free CVE-2026-64564 privilege escalation and container-to-host escape diagram

Linux SCTP kernel use-after-free CVE-2026-64564 privilege escalation and container-to-host escape diagram

CVE-2026-64564: SCTP Flaw Enables Container Escape

Do Son August 10, 2026

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers...

CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed KVM escape vulnerability Zapscape CVE-2026-64561 running commands with kernel root privilege, with public PoC exploit code

KVM escape vulnerability Zapscape CVE-2026-64561 running commands with kernel root privilege, with public PoC exploit code

CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed

Do Son August 7, 2026

TL;DR Security researcher Hyunwoo Kim (@v4bel) disclosed a KVM escape vulnerability named Zapscape. Tracked as CVE-2026-64561, it...

Chrome Security Update Patches 41 Vulnerabilities, Including 6 Critical Flaws Chrome security update patching 41 vulnerabilities including critical CVE-2026-19137 and CVE-2026-19170

Chrome security update patching 41 vulnerabilities including critical CVE-2026-19137 and CVE-2026-19170

Chrome Security Update Patches 41 Vulnerabilities, Including 6 Critical Flaws

Do Son August 7, 2026

TL;DR Google shipped a Chrome security update for the stable desktop channel. It fixes 41 vulnerabilities in...

Linux Kernel Flaw CVE-2026-53264 Lets Local Users Execute Arbitrary Code, PoC Published Linux kernel vulnerability CVE-2026-53264 net/sched use-after-free enabling arbitrary code execution

Linux kernel vulnerability CVE-2026-53264 net/sched use-after-free enabling arbitrary code execution

Linux Kernel Flaw CVE-2026-53264 Lets Local Users Execute Arbitrary Code, PoC Published

Do Son August 4, 2026

TL;DR A new Linux kernel vulnerability, tracked as CVE-2026-53264, lets a local user run arbitrary code and...

Debian 13 Kernel Update Fixes 68 Flaws, Four Rated Critical Debian 13 Linux kernel security update DSA-6405-1 fixing 68 vulnerabilities including four critical use-after-free flaws in net/sched, NVMe/TCP, and SMC-R

Debian 13 Linux kernel security update DSA-6405-1 fixing 68 vulnerabilities including four critical use-after-free flaws in net/sched, NVMe/TCP, and SMC-R

Debian 13 Kernel Update Fixes 68 Flaws, Four Rated Critical

Do Son August 3, 2026

The Debian project has published security advisory DSA-6405-1, delivering a new Linux kernel update for Debian 13....

CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed CVE-2026-42530 NGINX HTTP/3 RCE proof-of-concept exploiting a QPACK use-after-free

CVE-2026-42530 NGINX HTTP/3 RCE proof-of-concept exploiting a QPACK use-after-free

CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed

Do Son July 30, 2026

TL;DR: A public proof-of-concept now targets CVE-2026-42530, an NGINX HTTP/3 RCE flaw rated CVSS 9.2. The use-after-free...

Chrome 151 Update Patches 370 Security Vulnerabilities Chrome security update patching 370 vulnerabilities including critical use-after-free CVE-2026-17650

Chrome security update patching 370 vulnerabilities including critical use-after-free CVE-2026-17650

Chrome 151 Update Patches 370 Security Vulnerabilities

Do Son July 30, 2026

TL;DR Google shipped a large Chrome security update on the Stable channel. It fixes 370 vulnerabilities, including...

Node.js Patches 11 Vulnerabilities in July 2026 Security Release Node.js vulnerabilities patched in July 2026 including HTTP/2 use-after-free CVE-2026-56848

Node.js vulnerabilities patched in July 2026 including HTTP/2 use-after-free CVE-2026-56848

Node.js Patches 11 Vulnerabilities in July 2026 Security Release

Do Son July 29, 2026

TL;DR Node.js shipped fixes for 11 vulnerabilities on 29 July 2026. Three are rated high severity, and...

Apache Fory Patches Four Deserialization Flaws Across Java, C++, and Rust Apache Fory vulnerabilities in Java, C++, and Rust deserialization fixed in version 1.4.0

Apache Fory vulnerabilities in Java, C++, and Rust deserialization fixed in version 1.4.0

Apache Fory Patches Four Deserialization Flaws Across Java, C++, and Rust

Do Son July 27, 2026

TL;DR The Apache Fory project disclosed four vulnerabilities on July 21, 2026. Three carry an important rating,...

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs

Do Son July 24, 2026

TL;DR Google pushed Chrome 150.0.7871.186/.187 to the Stable channel on 23 July 2026. This Chrome security update...

Google Chrome Update Patches 12 High-Severity Security Flaws Chrome security update patching 12 high-severity vulnerabilities in Chrome 150

Google Chrome Update Patches 12 High-Severity Security Flaws

Do Son July 22, 2026

TL;DR Google shipped a Chrome security update on July 21, 2026. It fixes 12 vulnerabilities, and Google...

Chrome Security Update Patches Three Critical Use-After-Free Flaws in CameraCapture, GPU, and Network Chrome security update 150.0.7871.128 critical use-after-free vulnerabilities CameraCapture GPU Network

Chrome security update 150.0.7871.128 critical use-after-free vulnerabilities CameraCapture GPU Network

Chrome Security Update Patches Three Critical Use-After-Free Flaws in CameraCapture, GPU, and Network

Do Son July 17, 2026

TL;DR Google pushed Chrome 150.0.7871.128/.129 to the Stable channel on July 16, 2026. The release fixes seven...

Chrome 150 Security Update Fixes 15 Flaws, Including Two Critical Use-After-Free Bugs Chrome security update 150 fixing critical use-after-free flaws CVE-2026-15764 and CVE-2026-15765

Chrome security update 150 fixing critical use-after-free flaws CVE-2026-15764 and CVE-2026-15765

Chrome 150 Security Update Fixes 15 Flaws, Including Two Critical Use-After-Free Bugs

Do Son July 15, 2026

TL;DR Google has shipped a Chrome security update that raises the Stable channel to 150.0.7871.124/.125 on Windows...

CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland X.Org Server use-after-free vulnerability CVE-2026-56000 patched in xorg-server 21.1.24

X.Org Server use-after-free vulnerability CVE-2026-56000 patched in xorg-server 21.1.24

CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland

Do Son July 14, 2026

TL;DR X.Org shipped fixes for two memory-safety flaws in the X.Org Server and Xwayland. The more severe...

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242) Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation

Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)

Do Son July 14, 2026

TL;DR Bad Epoll is a Linux kernel use-after-free that turns any unprivileged user into root. It is...

FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation FreeBSD privilege escalation advisory chart highlighting a kernel use-after-free and two local root flaws

FreeBSD privilege escalation advisory chart highlighting a kernel use-after-free and two local root flaws

FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation

Do Son July 10, 2026

TL;DR On June 30, 2026, the FreeBSD Project shipped three advisories covering FreeBSD privilege escalation bugs in...

Critical Alert 1 Active Exploit Detected Today