CVE-2026-69044
In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
CVSS
—
Sin CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 5 nov 2026 · Última mod.: 5 nov 2026 · CWE-416
Sin historial EPSS suficiente todavía.
In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-69043——
———In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption5hCVE-2026-824189.8 CRÍ—
———IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.11hCVE-2026-1219557.5 ALT—
———FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emulate_SCardReleaseContext that frees the emulated SCardContext before its worker thread is cancelled and joined. A malicious server can send ESTABLISHCONTEXT, a long-timeout GETSTATUSCHANGE, then RELEASECONTEXT smartcard IRPs to corrupt heap memory or crash clients using smartcard emulation.13hCVE-2026-1219539.8 CRÍ—
———FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a duplicate-name channel with a new ChannelId overwrites the listener's single callback slot, which rdpgfx_on_close frees without clearing. A malicious RDP server can open and close such a channel, then send a PDU on the original channel to crash the client or potentially execute code.13hCVE-2026-104608——
——0A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with an account and SSH access to the instance could leverage this use-after-free into a controlled write and run arbitrary commands as babeld, including disclosure of its environment secrets. Exploitation required per-build memory offsets; failed attempts crashed babeld. This affected all releases prior to 3.23 and was fixed in 3.22.3, 3.21.8, 3.20.10, and 3.19.14. This vulnerability was reported via the GitHub Bug Bounty program.1dCVE-2026-1212579.6 CRÍ—
——0Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)3h