CVE-2026-50672
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS
7.0
High
EPSS
0.2%
p5
KEV
—
Exploit Today
1
0-100
Published: Jul 14, 2026 · Last modified: Jul 22, 2026 · CWE-362 · CWE-416
0.2%EPSS · 30 days0.2%
2026-07-152026-07-30
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-630358.1 HIG—
——0A heap use-after-free vulnerability in the TransferSubscriptions service
in open62541 may allow an authenticated attacker to cause a denial of
service or potentially execute arbitrary code.18hCVE-2026-54522——
——0MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Buffer#clear in ext/msgpack/buffer.c leaves rmem_last, rmem_end, and rmem_owner stale after _msgpack_buffer_shift_chunk returns an rmem page to the shared pool, allowing a subsequent Buffer#write and a second MessagePack::Buffer to alias the page and disclose or corrupt cross-buffer data. This issue is fixed in version 1.8.2.21hCVE-2026-512919.8 CRI—
——0sqlite 3.41 is vulnerable to use after free in the json.c jsonCacheInsert function of the JSON cache management module.21hCVE-2026-512909.1 CRI—
——0SQLite 3.41 has a use-after-free vulnerability in the shared cache lock management logic of the btree module. The program frees a BtLock structure without removing the node from the linked list. Subsequent linked list traversal accesses the released memory, which can lead to denial of service and sensitive memory information disclosure.21hCVE-2026-13117——
——0An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage22hCVE-2026-12996——
——0A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry22h