CVE-2026-45486
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS
7.8
Alto
EPSS
0.4%
p31
KEV
—
Exploit Today
9
0-100
Publicado: 9 jun 2026 · Última mod.: 23 jul 2026 · CWE-416
0.4%EPSS · 30 días0.4%
2026-08-222026-09-19
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-940553.7 BAJ—
———Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.4hCVE-2026-880978.1 ALT12.7%
——4Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.13hCVE-2026-935862.9 BAJ1.7%
——1ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact (e.g., a crash of the affected process). The issue is fixed in versions 7.1.2-31 and 6.9.13-56.1dCVE-2026-933828.8 ALT31.2%
——9Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)23hCVE-2026-933749.6 CRÍ29.2%
——9Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)23hCVE-2026-933739.6 CRÍ23.4%
——7Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)23h