CVE-2024-0582
A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RI
CVSS
7.8
Alta
EPSS
12.8%
p96
KEV
—
Exploit Today
29
0-100
Publicado: 16 de jan. de 2024 · Última mod.: 4 de nov. de 2026 · CWE-416
12.7%EPSS · 30 dias12.8%
2026-10-142026-11-11
A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.
- access.redhat.comhttps://access.redhat.com/security/cve/CVE-2024-0582
- bugs.chromium.orghttps://bugs.chromium.org/p/project-zero/issues/detail?id=2504
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2254050
- git.kernel.orghttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c392cbecd8eca4c53f2bf508731257d9d0a21c2d
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/04/24/3
- access.redhat.comhttps://access.redhat.com/security/cve/CVE-2024-0582
- bugs.chromium.orghttps://bugs.chromium.org/p/project-zero/issues/detail?id=2504
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2254050
- git.kernel.orghttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c392cbecd8eca4c53f2bf508731257d9d0a21c2d
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1217537.8 ALT—
——0Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of XE files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28587.10hCVE-2026-1217427.8 ALT—
——0Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of XE files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28757.10hCVE-2026-1217417.8 ALT—
——0Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30421.10hCVE-2026-126921——
——0Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)14hCVE-2026-126919——
——0Use after free in BrowserTag in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)14hCVE-2026-126918——
——0Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)14h