#Use-After-Free
All CosmicBytez Labs articles tagged #Use-After-Free, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-5759: FalkorDB Double-Free in RDB Decoder Enables Remote Code Execution
A crafted RDB replication stream triggers a double-free in FalkorDB's graph decoder, allowing DoS or RCE on unauthenticated instances.
- Security
CVE-2026-42007: Critical Use-After-Free in Dovecot's Sieve Editheader Extension
Dovecot's Sieve editheader extension has a critical use-after-free (CVSS 9.1) letting authenticated users corrupt memory during mail delivery.
- Security
CVE-2026-68820: Windows WinSock Driver Use-After-Free Privilege Escalation
Actively exploited use-after-free in Windows afd.sys (WinSock driver) enables local privilege escalation to SYSTEM. CVSS 7.0. Patch immediately.
- Security
CVE-2026-28928: Apple Platform Use-After-Free Causes Unexpected System Termination
A critical use-after-free vulnerability affects iOS, iPadOS, macOS, tvOS, and watchOS. A malicious app can trigger unexpected system termination. Apple...
- Security
CVE-2026-15773: Chrome Use-After-Free Sandbox Escape (CVSS 9.6)
A critical use-after-free vulnerability in Google Chrome's Core component on Windows allows remote attackers to escape the browser sandbox via a crafted...
- News
Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks
A high-severity use-after-free vulnerability lurking in Samsung's KNOX security framework for eight years left Galaxy devices from the S9 through S25...
- News
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
Redis has patched a use-after-free vulnerability in its blocking-client code that allows authenticated users to execute arbitrary OS commands on the database…
- Security
Google Chrome GPU Use-After-Free Sandbox Escape
A CVSS 9.6 critical use-after-free vulnerability in the GPU component of Google Chrome prior to 147.0.7727.138 allows a remote attacker to potentially...
- News
Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026
Google has patched the fourth Chrome zero-day vulnerability actively exploited in attacks this year, a use-after-free flaw in the Dawn graphics engine...
- News
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation
Google has released a Chrome security update patching 21 vulnerabilities including a high-severity use-after-free zero-day in the Dawn graphics engine...
- Security
Google Patches First Chrome Zero-Day of 2026: CVE-2026-2441
Google has patched CVE-2026-2441, a high-severity use-after-free vulnerability in Chrome's CSS component that has been actively exploited — the first...
- Security
Google Chrome Use-After-Free Zero-Day Under Active
A high-severity use-after-free vulnerability in Chrome's CSS engine is being actively exploited in the wild. Google's first in-the-wild Chrome zero-day of...