CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows AFD.sys Use-After-Free Local Privilege Escalation Vulnerability (CVE-2026-68820) Security Advisory
[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Ancillary Function Driver for WinSock (afd.sys)
[Impact] An authorized local attacker can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access
Google Chrome Dawn Use-After-Free Vulnerability (CVE-2026-5281) Technical Advisory
[Affected Scope] Google Chrome versions prior to 146.0.7680.178
[Impact] A remote attacker who has compromised the renderer process can execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.178 or higher)
Adobe Acrobat and Reader Use-After-Free Arbitrary Code Execution Vulnerability (CVE-2020-9715)
[Affected Scope] Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier
[Impact] Successful exploitation of this Use-After-Free vulnerability allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted PDF file
[Mitigation] Immediately apply the official Adobe security patch (APSB20-48) and restrict opening PDF files from untrusted sources
Microsoft Internet Explorer iepeers.dll Use-After-Free Remote Code Execution Vulnerability (CVE-2010-0806)
[Affected Scope] Microsoft Internet Explorer 6, 6 SP1, and 7.
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by enticing them to visit a specially crafted webpage.
[Mitigation] Apply the official Microsoft security updates, or implement workarounds such as setting the ActiveX Kill-Bit for the affected CLSID.
Microsoft Internet Explorer Use-After-Free Remote Code Execution Vulnerability (CVE-2010-0249, Operation Aurora)
[Affected Scope] Microsoft Internet Explorer 6, 6 SP1, 7, and 8 running on Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by enticing them to visit a specially crafted malicious webpage
[Mitigation] Apply the official Microsoft security update (KB979352) immediately, or implement temporary mitigations such as enabling DEP and disabling Active Scripting