Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-55007
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
#cwe-415
共收录 139 条相关情报。
← 返回所有主题A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages
CVE-2026-82325
A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated
In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained ...
CVE-2026-20510
In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalatio
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback...
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' quer
c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' quer
A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the h...
CVE-2026-84964
A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This mani...
CVE-2026-82677
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/mo
valkey-io valkey Module Timer module.c moduleTimerHandler double free
CVE-2026-82677
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/mo
A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing b...
CVE-2026-19316
A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to creat
An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentica...
CVE-2026-75159
An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication m
Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruptio...
CVE-2026-18798
Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial pac
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that...
CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but no
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a do...
CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but no
Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory f...
CVE-2026-45202
Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possib
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_server_recv_formats in channels/rdpsnd/server/rdpsnd_main.c frees context->client_format...
CVE-2026-63652
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_server_recv_formats in channels
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function frees the parsed controls array on the Session Tracking critical-control rejection path without clea...
CVE-2026-18663
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function frees the parsed controls array on the Sess
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65780
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-62889
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a ne
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62766
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-61366
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.