CVE Watch8 de set. de 2026

CVE-2026-0001

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture K

CVSS

4.4

Média

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 8 de set. de 2026 · Última mod.: 8 de set. de 2026 · CWE-416

EPSS · 30d

0.1%EPSS · 30 dias0.2%

2026-10-132026-11-10

Descrição técnica

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.

Referências oficiais

support.arm.comhttps://support.arm.com/documentation/111552/1-0/?lang=en

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1208115.9 MÉD

—

——0A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, an unowned reference to data from an earlier command can be retained in cached plan statistics. After the originating memory is freed, a subsequent diagnostic command serializing those statistics can read freed heap memory, potentially returning sensitive server process memory contents to the authenticated client. Under certain heap reuse conditions, this may also cause the server to crash.5h CVE-2026-1208096.8 MÉD

—

——0A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines with $unwind on time-series collections. An internal error in state-preservation logic can cause a value still referenced by downstream stages to have its underlying memory freed prematurely. An authenticated user can craft an aggregation pipeline under specific conditions to trigger this condition, potentially reading recycled server heap memory in query results or crashing the server. This issue is only triggerable when a non-default server parameter related to the SBE engine is enabled.5h CVE-2026-1208037.1 ALT

—

——0A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator used by certain $setWindowFields aggregation pipelines. Under specific conditions, the accumulator can retain a dangling pointer to memory that has since been freed. When this stale pointer is later dereferenced during serialization of the carried-forward value, it can result in a heap out-of-bounds read that may expose adjacent heap contents and crash the mongod server. An authenticated user with readWrite privileges on a database can trigger this issue by crafting a specific aggregation pipeline.5h CVE-2026-969947.0 ALT

—

——0Use after free in Winsock allows an authorized attacker to elevate privileges locally.6h CVE-2026-969926.4 MÉD

—

——0Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.6h CVE-2026-969835.3 MÉD

—

——0Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.6h