Search Results (906 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-70562 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-10 7 High
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-71338 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-09-10 6.4 Medium
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
CVE-2026-71353 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-10 7 High
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-71351 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-10 7 High
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2026-72958 1 Microsoft 8 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 5 more 2026-09-10 8.2 High
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-77493 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-10 9.8 Critical
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-77504 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-10 8.8 High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69322 1 Microsoft 11 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 8 more 2026-09-10 8 High
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVE-2026-69398 1 Microsoft 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more 2026-09-10 7 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69876 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-09-10 8 High
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVE-2026-69725 1 Microsoft 12 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 9 more 2026-09-10 7.8 High
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-70567 1 Microsoft 8 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 5 more 2026-09-10 7 High
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69309 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-09-10 7 High
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-79907 3 Adobe, Apple, Microsoft 5 Acrobat, Acrobat Dc, Acrobat Reader Dc and 2 more 2026-09-10 7.8 High
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-61915 1 Cyrusimap 1 Cyrus Imap 2026-09-10 4.2 Medium
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.
CVE-2026-69337 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-09-09 7.1 High
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
CVE-2026-55007 1 Microsoft 5 Exchange Server 2019, Exchange Server Se, Microsoft Exchange Server 2019 Cumulative Update 14 and 2 more 2026-09-09 8.1 High
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-87585 2 Google, Microsoft 2 Chrome, Windows 2026-09-09 8.8 High
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-14164 3 Libarchive, Red Hat, Redhat 12 Libarchive, Enterprise Linux, Discovery and 9 more 2026-09-09 7.5 High
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.
CVE-2026-81950 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 7.8 High
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.