CVE-2026-69043
In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Nov 5, 2026 · Last modified: Nov 5, 2026 · CWE-416
Not enough EPSS history yet.
In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-69044——
———In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.6hCVE-2026-824189.8 CRI—
———IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.12hCVE-2026-1219557.5 HIG—
———FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseContext that frees the emulated SCardContext before its worker thread is cancelled and joined. A malicious server can send ESTABLISHCONTEXT, a long-timeout GETSTATUSCHANGE, then RELEASECONTEXT smartcard IRPs to corrupt heap memory or crash clients using smartcard emulation.14hCVE-2026-1219539.8 CRI—
———FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a duplicate-name channel with a new ChannelId overwrites the listener's single callback slot, which rdpgfx_on_close frees without clearing. A malicious RDP server can open and close such a channel, then send a PDU on the original channel to crash the client or potentially execute code.14hCVE-2026-104608——
——0A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with an account and SSH access to the instance could leverage this use-after-free into a controlled write and run arbitrary commands as babeld, including disclosure of its environment secrets. Exploitation required per-build memory offsets; failed attempts crashed babeld. This affected all releases prior to 3.23 and was fixed in 3.22.3, 3.21.8, 3.20.10, and 3.19.14. This vulnerability was reported via the GitHub Bug Bounty program.1dCVE-2026-1212579.6 CRI—
——0Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)4h