🎯 Use-after-free

The items that name it 32

• ClioBitcoinBank 🏴‍☠️ (@ClioBitcoinBank) on X
  advisoryas classification.key entities2026-10-31
• Critical Linux kernel flaw allows remote root attacks on MPTCP servers
  articleas techniques2026-10-30

  CVE-2026-98432 is a use-after-free in the kernel's IPv4 TCP code: tcp_v4_syn_recv_sock() transfers ireq->ireq_opt to the child socket without copying it.

• CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation
  articleas techniques2026-10-30

  The flaw: IPv4 options object ireq_opt/inet_opt is freed with kfree() while another CPU still reads it as an RCU reader.

• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas techniques2026-10-29It is written here as Use after free.

  PHP2Shell forces PHP out of memory mid-request, leaving a dangling pointer to freed memory that the next request fills with crafted data, read as an internal object.

• CVE-2026-98432: 9.8 CVE affecting all Ubuntu versions
  advisoryas techniques2026-10-29

  Flaw in ip_options_build(): the child socket's inet_opt is freed with a plain kfree() while another CPU still builds a SYNACK from ireq->ireq_opt

• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas classification.key entities2026-10-29
• Chrome and Firefox Updates Patch Over 200 Vulnerabilities
  articleas classification.key entities2026-10-28
• The Impact of AI on CVEs: Industry Challenges
  articleas classification.key entities2026-10-27
• PHP2Shell: What This Week Tells Us About the Web We Built
  articleas classification.key entities2026-10-23
• [tl;dr sec] #351 - PHP2Shell, Autopatching Skills, AWS Pathrunner
  articleas techniques2026-10-22

  Vulnerability class in curl's HTTP/2 upload handling that turned into RCE, described by Daniel Stenberg.

• Paul Dragoonis (@dr4goonis) on X
  threadas classification.key entities2026-10-22
• PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): Update Now
  advisoryas classification.key entities2026-10-22
• There isn't an easy exploit for this PHP vulnerability
  articleas classification.key entities2026-10-21
• PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
  writeupas classification.key entities2026-10-21
• Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
  articleas techniques2026-10-21It is written here as Use-after-free (125 issues fixed in Chrome 156).

  125 issues fixed in Chrome 156

• eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
  repoas classification.key entities2026-10-21
• ikow/php2shell-poc
  repoas classification.key entities2026-10-21
• PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
  articleas classification.key entities2026-10-21
• PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation
  writeupas classification.key entities2026-10-21
• From JavaScript to Renderer Code Execution: Three V8 Vulnerabilities and Two v8CTF Flags | depthfirst
  writeupas techniques2026-10-20It is written here as Use-after-free (native isolate).

  The V8 sandbox escape (issue 546253900) causes a worker's native V8 isolate pointer to be freed while a backing store (A) still references it, enabling a native use-after-free reached via memory.grow(0)

• Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
  articleas techniques2026-10-14
• curl HTTP/2 upload UAF turned RCE (CVE-2026-92392)
  articleas classification.key entities2026-10-14
• Chrome 155 Update Patches 247 Vulnerabilities
  articleas techniques2026-10-07

  Class of all four critical-severity flaws fixed in the Chrome 155 update (CVE-2026-106382, CVE-2026-106197, CVE-2026-106358, CVE-2026-106347); 34 use-after-free bugs were fixed in total.

• 1Password's AI patching benchmark is misleading
  articleas techniques2026-09-15

  Vulnerability class left unaddressed by patches judged 'clean' by Chromium's automated grader in 1Password's benchmark; also the root cause pattern in the freenginx bug where a callback could be used after being destroyed by Perl

• Common C/C++ Vulnerabilities: A Practical Guide to Prevention | Blog | Endor Labs
  articleas techniques2026-09-11It is written here as Use-After-Free (CWE-416).

  program continues using a pointer after the memory it points to has been deallocated, creating a dangling pointer that can corrupt or control reassigned memory; related to double free

• Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
  advisoryas techniques2026-09-08It is written here as Use After Free.
• Static Analysis Tools & Linters
  repoas techniques2026-08-09
• Semgrep Rules (0xdea)
  repoas techniques2026-07-31

  Potential use after free

• Behind the GitLab RCE: A depthfirst Journey into the Ruby Ecosystem | depthfirst
  writeupas classification.key entities2026-07-27
• Going depthfirst: Achieving GitLab RCE via Two Ruby Memory Corruption Vulnerabilities | depthfirst
  writeupas classification.key entities2026-07-24
• Orca Security: Critical Heap Buffer Overflow in NGINX Allows Unauthenticated RCE
  advisoryas techniques2026-07-20It is written here as Use-after-free (ngx_http_ssi_module).

  ngx_http_ssi_module

• PHP2Shell: pre-auth RCE via PHP memory-limit fatal errors (CVE-2026-109618/109619)
  writeupas classification.key entities