CWE-416: Use After Free vulnerabilities

CVE-2026-47587 is a use-after-free vulnerability in the NVIDIA GPU Display Driver for Linux, impacting the RTX, Quadro, and NVS product lines. This vulnerability allows an unprivileged user to potentially execute arbitrary code, escalate privileges, cause denial of service, disclose information, or tamper with data. The vulnerability has a high severity score of 7.8. No specific affected versions or patch information are provided in the available data.

CVE-2026-47586 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver kernel module for Windows and Linux. Exploitation could allow an attacker to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a CVSS score of 6.4, indicating a medium severity level. No specific affected versions or patches are provided in the available data.

CVE-2026-19445 is a critical use-after-free vulnerability (CWE-416) in the Python CPython implementation affecting TLS servers that use the sni_callback to assign different SSL contexts per connection without retaining references to the original SSLContext. This can cause server crashes or calls through freed pointers. TLS clients are not affected. The vulnerability impacts multiple CPython versions prior to specific patched releases. Mitigation involves keeping a reference to every SSLContext that sets sni_callback for the server's lifetime.

CVE-2026-47594 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It allows an unprivileged user to trigger a use-after-free condition by issuing a specific sequence of driver commands. Successful exploitation could lead to code execution, privilege escalation, denial of service, data tampering, and information disclosure.

CVE-2026-47590 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It allows an unprivileged user to trigger a use-after-free condition by issuing a specific sequence of driver commands. Exploitation could lead to code execution, privilege escalation, denial of service, and information disclosure. The vulnerability has a high severity rating with a CVSS score of 7.8. No affected versions or patch information are provided in the available data.

CVE-2026-47579 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver for Windows kernel mode driver. This flaw allows a local user with limited privileges to potentially execute arbitrary code, escalate privileges, cause denial of service, disclose information, or tamper with data. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47560 is a use-after-free vulnerability in the NVIDIA GPU Display Driver for Linux kernel mode layer. It allows an unprivileged user to potentially execute arbitrary code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a high severity score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47551 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver kernel mode layer for Windows and Linux. Exploitation could allow an attacker with limited privileges to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47516 is a use-after-free vulnerability in the NVIDIA GPU Display Driver for Windows and Linux. It allows an unprivileged user to potentially execute code, escalate privileges, tamper with data, cause denial of service, or disclose information. The vulnerability has a high severity score of 7.8. No specific affected versions or patch information are provided.

CVE-2026-47505 is a use-after-free vulnerability in the kernel mode layer of the NVIDIA GPU Display Driver for Windows. Exploiting this flaw could allow an attacker with local access to execute arbitrary code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patch information is provided.

CVE-2026-47500 is a use-after-free vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It occurs in the kernel mode layer due to improper cleanup of reference counts during error handling. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a high severity with a CVSS score of 7.8. No affected versions or patch information are provided in the available data.

CVE-2026-102760 is a use-after-free vulnerability in Eclipse Foundation's NetX Duo when built with NX_SECURE_KEY_CLEAR. The vulnerability occurs because TLS records are wiped after being handed to TCP, which may have already released the packet memory. This leads to memory corruption by writing zeros into freed or reused packets, causing an underflow and out-of-bounds memory write.

CVE-2026-100818 is a critical use-after-free vulnerability in the Widget: Gtk component of Mozilla Thunderbird that allows sandbox escape. This flaw was fixed in Thunderbird versions 140.17, 153.4, and 157, as well as corresponding Firefox ESR versions. The vulnerability has a high CVSS score of 9.6, indicating it can lead to complete system compromise if exploited. No known exploits are reported in the wild at this time.

CVE-2026-100811 is a critical use-after-free vulnerability in the DOM Core & HTML component of Mozilla Thunderbird that allows sandbox escape. This flaw has been fixed in Thunderbird versions 140.17, 153.4, and 157. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. Users should update to the fixed versions to mitigate the risk.

CVE-2026-100761 is a high-severity privilege escalation vulnerability in Mozilla Thunderbird caused by a use-after-free flaw in the Graphics: WebGPU component. This memory mismanagement issue allows an attacker to escalate privileges. The vulnerability was fixed in Thunderbird version 157.

A use-after-free vulnerability in the ZigBee ZCL protocol dissector of Wireshark versions 4.6.0 through 4.6.8 can cause the application to crash, resulting in a denial of service condition.

CVE-2026-91096 is a use-after-free vulnerability in Facebook's proxygen library affecting versions from 2024.10.28.00 up to but not including 2026.09.28.00. The issue arises because the WebTransportImpl component fails to unregister read callbacks for streams that are no longer open before destroying them, potentially allowing the transport to invoke a freed read callback. This vulnerability has a high severity rating with a CVSS score of 7.5, indicating a significant impact on confidentiality without affecting integrity or availability.

CVE-2026-91095 is a use-after-free vulnerability in Facebook's proxygen library affecting versions from 2024.10.28.00 up to but not including 2026.09.28.00. The issue arises when certain HTTPTransaction APIs return stream handles that have already been freed, leading to potential use of freed memory. This flaw could cause application instability or crashes but does not impact confidentiality or integrity.

CVE-2026-84895 is a use-after-free vulnerability in Facebook's proxygen library affecting versions from 2026.04.06.00 up to but not including 2026.09.28.00. The issue occurs when QuicWtSession::closeSession accesses member fields after the base class method QuicWtSessionBase::closeSession potentially destroys the session object. This can lead to memory corruption and impacts confidentiality, integrity, and availability.

CVE-2026-84894 is a use-after-free vulnerability in Meta Platforms, Inc's moxygen component. The issue occurs before commit 004123dd24c3, where MoQSession::dataStreamReadLoop continues to use a stream read handle after receiving a FIN signal, which invalidates the handle under proxygen's WebTransport API. A remote attacker can trigger this by opening a data stream with an unknown track alias and sending the FIN in the same write. This vulnerability has a high severity with a CVSS score of 7.5 and impacts confidentiality but not integrity or availability.