use after free Archives • Daily CyberSecurity

Node.js Patches 11 Vulnerabilities in July 2026 Security Release Node.js vulnerabilities patched in July 2026 including HTTP/2 use-after-free CVE-2026-56848

Node.js vulnerabilities patched in July 2026 including HTTP/2 use-after-free CVE-2026-56848

Node.js Patches 11 Vulnerabilities in July 2026 Security Release

Do Son July 29, 2026

TL;DR Node.js shipped fixes for 11 vulnerabilities on 29 July 2026. Three are rated high severity, and...

Apache Fory Patches Four Deserialization Flaws Across Java, C++, and Rust Apache Fory vulnerabilities in Java, C++, and Rust deserialization fixed in version 1.4.0

Apache Fory vulnerabilities in Java, C++, and Rust deserialization fixed in version 1.4.0

Apache Fory Patches Four Deserialization Flaws Across Java, C++, and Rust

Do Son July 27, 2026

TL;DR The Apache Fory project disclosed four vulnerabilities on July 21, 2026. Three carry an important rating,...

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs

Do Son July 24, 2026

TL;DR Google pushed Chrome 150.0.7871.186/.187 to the Stable channel on 23 July 2026. This Chrome security update...

Google Chrome Update Patches 12 High-Severity Security Flaws Chrome security update patching 12 high-severity vulnerabilities in Chrome 150

Google Chrome Update Patches 12 High-Severity Security Flaws

Do Son July 22, 2026

TL;DR Google shipped a Chrome security update on July 21, 2026. It fixes 12 vulnerabilities, and Google...

Chrome Security Update Patches Three Critical Use-After-Free Flaws in CameraCapture, GPU, and Network Chrome security update 150.0.7871.128 critical use-after-free vulnerabilities CameraCapture GPU Network

Chrome security update 150.0.7871.128 critical use-after-free vulnerabilities CameraCapture GPU Network

Chrome Security Update Patches Three Critical Use-After-Free Flaws in CameraCapture, GPU, and Network

Do Son July 17, 2026

TL;DR Google pushed Chrome 150.0.7871.128/.129 to the Stable channel on July 16, 2026. The release fixes seven...

Chrome 150 Security Update Fixes 15 Flaws, Including Two Critical Use-After-Free Bugs Chrome security update 150 fixing critical use-after-free flaws CVE-2026-15764 and CVE-2026-15765

Chrome security update 150 fixing critical use-after-free flaws CVE-2026-15764 and CVE-2026-15765

Chrome 150 Security Update Fixes 15 Flaws, Including Two Critical Use-After-Free Bugs

Do Son July 15, 2026

TL;DR Google has shipped a Chrome security update that raises the Stable channel to 150.0.7871.124/.125 on Windows...

CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland X.Org Server use-after-free vulnerability CVE-2026-56000 patched in xorg-server 21.1.24

X.Org Server use-after-free vulnerability CVE-2026-56000 patched in xorg-server 21.1.24

CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland

Do Son July 14, 2026

TL;DR X.Org shipped fixes for two memory-safety flaws in the X.Org Server and Xwayland. The more severe...

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242) Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation

Bad Epoll CVE-2026-46242 Linux kernel use-after-free enabling root privilege escalation

Public Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)

Do Son July 14, 2026

TL;DR Bad Epoll is a Linux kernel use-after-free that turns any unprivileged user into root. It is...

FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation FreeBSD privilege escalation advisory chart highlighting a kernel use-after-free and two local root flaws

FreeBSD privilege escalation advisory chart highlighting a kernel use-after-free and two local root flaws

FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation

Do Son July 10, 2026

TL;DR On June 30, 2026, the FreeBSD Project shipped three advisories covering FreeBSD privilege escalation bugs in...

Linux kernel privilege escalation CVE-2026-46215 DRM GEM use-after-free root exploit diagram

Linux Kernel Privilege Escalation Flaw CVE-2026-46215: PoC and Full Write-Up Public

Do Son July 9, 2026

TL;DR A researcher has published a full technical write-up and proof-of-concept exploit for a Linux kernel privilege...

Chrome Security Update Patches 27 Flaws, Including Two Critical Use-After-Free Bugs Chrome security update patching critical use-after-free vulnerabilities in version 150.0.7871.114

Chrome security update patching critical use-after-free vulnerabilities in version 150.0.7871.114

Chrome Security Update Patches 27 Flaws, Including Two Critical Use-After-Free Bugs

Do Son July 9, 2026

TL;DR Google shipped a Chrome security update that fixes 27 flaws across the desktop browser. Two are...

Foxit PDF Reader Flaws Enable Arbitrary Code Execution Foxit PDF Reader arbitrary code execution vulnerability patched in version 2026.1.2

Foxit PDF Reader Flaws Enable Arbitrary Code Execution

Do Son July 8, 2026

TL;DR Foxit shipped Foxit PDF Reader 2026.1.2 and PDF Editor 2026.1.2 for Windows. The release fixes 28...

OpenSSH 10.4 Ships Eight Security Fixes for SSH Clients and Servers OpenSSH 10.4 security fixes including a client use-after-free and SFTP SCP path flaws

OpenSSH 10.4 security fixes including a client use-after-free and SFTP SCP path flaws

OpenSSH 10.4 Ships Eight Security Fixes for SSH Clients and Servers

Do Son July 8, 2026

TL;DR OpenSSH 10.4 landed on July 6 with eight security fixes. The most serious is a client-side...

Public Exploit for GhostLock (CVE-2026-43499) Enables Linux Privilege Escalation and Container Escape GhostLock CVE-2026-43499 Linux kernel privilege escalation and container escape exploit chain

GhostLock CVE-2026-43499 Linux kernel privilege escalation and container escape exploit chain

Public Exploit for GhostLock (CVE-2026-43499) Enables Linux Privilege Escalation and Container Escape

Do Son July 8, 2026

TL;DR Researchers have published full details and proof-of-concept code for GhostLock. This Linux kernel bug, tracked as...

Linux kernel vulnerability CVE-2024-26582 TLS use-after-free root shell exploit diagram

Linux Kernel Vulnerability CVE-2024-26582: Public PoC Reaches Root Shell

Do Son July 7, 2026

TL;DR Researchers have published full technical details and proof-of-concept exploit code for a Linux kernel vulnerability tracked...

Chrome Security Update Patches 382 Vulnerabilities, 15 Critical Chrome security update patching 382 vulnerabilities including 15 critical use-after-free flaws

Chrome security update patching 382 vulnerabilities including 15 critical use-after-free flaws

Chrome Security Update Patches 382 Vulnerabilities, 15 Critical

Do Son July 1, 2026

TL;DR Google shipped a large Chrome security update on 30 June 2026. It fixes 382 security flaws...

Chrome 149 security update patching WebGL use-after-free vulnerability

Chrome 149 Security Update Patches 18 Flaws, Four Rated Critical

Do Son June 25, 2026

TL;DR Google updated Chrome’s Stable channel to 149.0.7827.196 for desktop. This Chrome 149 security update fixes 18...

F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055) NGINX vulnerabilities CVE-2026-42530 HTTP/3 use-after-free and HTTP/2 buffer overflow

NGINX vulnerabilities CVE-2026-42530 HTTP/3 use-after-free and HTTP/2 buffer overflow

F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)

Do Son June 19, 2026

F5 has issued out-of-band patches for two serious flaws in its NGINX web server. The critical NGINX...

Chrome security update patching a critical use-after-free vulnerability (CVE-2026-12437) in the Google Chrome 149 desktop browser

Chrome Security Update Fixes 33 Flaws, Seven Critical

Do Son June 17, 2026

Google has shipped a major Chrome security update, and it closes 33 distinct vulnerabilities. The Stable channel...

MongoDB Server Vulnerability Wave Hits Document Databases MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085

MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085

MongoDB Server Vulnerability Wave Hits Document Databases

Do Son June 17, 2026

A fresh MongoDB Server vulnerability cluster has surfaced, and it puts widely used document databases at real...

OpenSSL Security Patches Fix Remote Code Execution Risk CVE-2022-3602 OpenSSL security patches remote code execution risk

OpenSSL Security Patches Fix Remote Code Execution Risk

Do Son June 10, 2026

Critical Use-After-Free Defect Discovered in Core Certificate Verification Module The development group behind the widely deployed open-source...

New Chrome Security Update Addresses Critical V8 Exploit in the Wild Chrome security update exploit in the wild Chrome Zero-Day CVE-2026-3909 Chrome Zero-Day PoC CVE-2026-2441 Chrome Zero-Day CVE-2026-2441 Chrome Zero-Day, Active Exploitation CVE-2025-10585 Chrome vulnerability, zero-day exploit CVE-2025-6558 Chrome Zero-Day, V8 Vulnerability Chrome Zero-Day, Security Update

Chrome security update exploit in the wild Chrome Zero-Day CVE-2026-3909 Chrome Zero-Day PoC CVE-2026-2441 Chrome Zero-Day CVE-2026-2441 Chrome Zero-Day, Active Exploitation CVE-2025-10585 Chrome vulnerability, zero-day exploit CVE-2025-6558 Chrome Zero-Day, V8 Vulnerability Chrome Zero-Day, Security Update

New Chrome Security Update Addresses Critical V8 Exploit in the Wild

Do Son June 9, 2026

Google Deploys Urgent Patches for Multiple Desktop Subsystems Google has released a major software modification for its...