Memory-Corruption

Linux Kernel — OVSwrap: Open vSwitch Conntrack Local Privilege Escalation (CVE-2026-64531) newCVE-2026-64531binaryHIGH 7.8Patched2026-08-15V8 Array Iterator Maglev Type Confusion — addrof/fakeobj Primitives (CVE-2026-14431) newCVE-2026-14431binaryHIGH 8.8Unpatched2026-07-19RediShell: Redis Lua Scripting Use-After-Free Leading to JOP-Chained Remote Code Execution (CVE-2025-49844) new EPSS 87%CVE-2025-49844binaryCRITICAL 9.9Patched2026-07-06Windows Secure Kernel (VTL1/VSM) Memory Corruption PoC (CVE-2026-26179 / ZDI-26-276) newCVE-2026-26179 / ZDI-26-276binaryHIGHUnverified2026-07-05Windows HTTP.sys Header-Count-Triggered Kernel Memory Corruption / BSOD (CVE-2026-49160) new EPSS 54%CVE-2026-49160binaryHIGHPatched2026-07-05V8 JavaScript Engine Exploit — "Longinus" Kit (CVE-2026-6307) newCVE-2026-6307binaryCRITICALUnverified2026-07-05rldns 1.3 Heap-Based Out-of-Bounds Read Remote DoS (CVE-2026-27831) newCVE-2026-27831binaryMEDIUMPatched2026-07-05PostgreSQL pgcrypto PGP Heap Overflow to Superuser Escalation — CVE-2026-2005 newCVE-2026-2005binaryCRITICALUnverified2026-07-05nginx Resolver Use-After-Free in OCSP Stapling (CVE-2026-40701) newCVE-2026-40701webMEDIUM 6.3Patched2026-07-05dnsmasq extract_addresses() RDLEN/RDATA Buffer Overflow — CVE-2026-5172 newCVE-2026-5172networkINFOPatched2026-07-05curl SMB Connection-Reuse Use-After-Free (CVE-2026-3805) newCVE-2026-3805networkHIGHPatched2026-07-05AppleM2ScalerCSCDriver Shared Scheduler Use-After-Free (CVE-2026-43655) newCVE-2026-43655binaryHIGHUnverified2026-07-05QEMU CXL Type-3 Mailbox Guest-to-Host Escape newNone assigned as of 2026-07-03binaryCRITICALUnverified2026-07-03Pillow ImageCms Mutable output_mode Heap OOB Write newNone assigned as of 2026-07-03binaryHIGHUnverified2026-07-03PHP 8.5.7 StreamBucket-to-SOAP Numeric Cookie Remote Code Execution newNone assigned as of 2026-07-03webCRITICALUnverified2026-07-03libssh2 Unchecked SSH packet_length Integer Wrap to RCE (CVE-2026-55200) newCVE-2026-55200networkCRITICALPatched2026-07-03libssh2 Publickey Subsystem List Parser Heap Corruption to Code Execution newNone assigned as of 2026-07-03networkCRITICALUnverified2026-07-03Ladybird Browser WebAssembly ESM Host-Function Use-After-Free RCE newNone assigned as of 2026-07-03webCRITICALUnverified2026-07-03FFmpeg RASC Decoder DLTA Heap Out-of-Bounds Write newNone assigned as of 2026-07-03binaryCRITICALUnpatched2026-07-03Google Chromium V8 Out-of-Bounds Read/Write — Crash PoC (CVE-2026-11645) new KEVCVE-2026-11645webHIGH 8.8Unverified2026-07-01Windows OLE Zero-Click RCE via Outlook RTF (CVE-2025-21298) new EPSS 81%CVE-2025-21298binaryCRITICAL 9.8Patched2026-05-16QEMUtiny - QEMU CXL Type-3 Memory Corruption Chain new—binaryCRITICALUnverified2026-05-16