Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 730 | 0,2 % |
| ≥50 % | 3.213 | 0,9 % |
| ≥10 % | 22.093 | 5,9 % |
| <10 % | 347.808 | 93,0 % |
CVE-2026-109619 | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it h
CVE-2026-109618 | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing a
CVE-2026-97816 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-105010 | Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-100219 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-100202 | Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
CVE-2026-83780 | Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70025 | Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
CVE-2026-62898 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
CVE-2026-64564 | In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, set once in sctp_rcv()). For an ASCONF located through its Address Parameter by __sctp_rcv_asconf_lookup(), that cached transport corresponds to the Address Parameter, which need not be the packet's sourc
In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (==