Memory corruption vulnerabilities

buffer overflow / use-after-free1,507 advisories142 exploitedlatest 2026-09-04

Memory corruption covers buffer overflows, use-after-free and out-of-bounds reads/writes in native code. Successful exploitation typically yields code execution, which is why browser, OS kernel and network-stack memory bugs are prized by exploit developers and appear regularly in the KEV catalog.

Classification is assigned by the CSIRTS enrichment pipeline from the advisory text. The list below shows the latest advisories tagged memory corruption, newest first, across national CERTs, vendor PSIRTs and vulnerability databases — exploited marks CVEs in the CISA KEV catalog.

Latest memory corruption advisories

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71200 CVE-2025-71201 CVE-2025-71202 CVE-2025-71203cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71192 CVE-2025-71193 CVE-2025-71194 CVE-2025-71195cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71180 CVE-2025-71181 CVE-2025-71182 CVE-2025-71183cert-bund2026-09-04

[UPDATE] [medium] expat: Vulnerability enables code execution

mediumCVE-2026-25210cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71145 CVE-2025-71146 CVE-2025-71147 CVE-2025-71148cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71102 CVE-2025-71103 CVE-2025-71104 CVE-2025-71105cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2025-68767 CVE-2025-68768 CVE-2025-68769 CVE-2025-68770cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2022-50712 CVE-2022-50713 CVE-2022-50714 CVE-2022-50715cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities allow denial of service

highCVE-2022-50829 CVE-2022-50830 CVE-2022-50831 CVE-2022-50832cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2022-50697 CVE-2022-50698 CVE-2022-50699 CVE-2022-50700cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-40346 CVE-2025-40347 CVE-2025-40348 CVE-2025-40349cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2025-40178 CVE-2025-40179 CVE-2025-40180 CVE-2025-40181cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-40112 CVE-2025-40113 CVE-2025-40115 CVE-2025-40116cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-40086 CVE-2025-40087 CVE-2025-40088 CVE-2025-40089cert-bund2026-09-04

[UPDATE] [high] Golang Go: Multiple vulnerabilities

highCVE-2026-27140 CVE-2026-27143 CVE-2026-27144 CVE-2026-32280cert-bund2026-09-04

[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-23271 CVE-2026-23272 CVE-2026-23273 CVE-2026-23274cert-bund2026-09-04

[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2025-71268 CVE-2025-71269 CVE-2025-71270 CVE-2026-23249cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71265 CVE-2025-71266 CVE-2025-71267 CVE-2026-23242cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71238 CVE-2026-23231 CVE-2026-23232 CVE-2026-23233cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71225 CVE-2025-71226 CVE-2025-71227 CVE-2025-71228cert-bund2026-09-04

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2026-31535 CVE-2026-31536 CVE-2026-31537 CVE-2026-31538cert-bund2026-09-04

[NEW] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2024-14040 CVE-2026-64208 CVE-2026-64209 CVE-2026-64210cert-bund2026-09-04

Cisco IOS XR Software Security Hardening Release: September 2026

criticalCVE-2026-20274 CVE-2026-20275 CVE-2026-20276 CVE-2026-20277cisco-psirt2026-09-03

USN-8719-1: APR-util vulnerabilities

unknownCVE-2025-49506 CVE-2026-32327 CVE-2026-34501 CVE-2026-34502ubuntu2026-09-03

USN-8721-1: OpenSSH vulnerabilities

unknownCVE-2026-73281 CVE-2026-73282 CVE-2026-73283ubuntu2026-09-03

Pyramid Solutions NetStaX EtherNet/IP Stack

criticalCVE-2026-78012cisa2026-09-03

[NEW] [high] IBM i: Multiple Vulnerabilities

highCVE-2026-17255 CVE-2026-18175 CVE-2026-18221 CVE-2026-18341cert-bund2026-09-03

[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2026-53326 CVE-2026-53327 CVE-2026-53328 CVE-2026-53329cert-bund2026-09-03

[NEW] [UNPATCHED] [high] zlib: Vulnerability enables Denial of Service and integrity loss

highCVE-2026-85091cert-bund2026-09-03

USN-8716-1: FFmpeg vulnerabilities

unknownCVE-2026-64830 CVE-2026-64833 CVE-2026-64834 CVE-2026-64835ubuntu2026-09-03

[NEW] [medium] Linux Kernel: Multiple vulnerabilities

mediumexploitedCVE-2026-53359 CVE-2026-53360 CVE-2026-53361 CVE-2026-53362cert-bund2026-09-03

[UPDATE] [medium] Linux Kernel: Vulnerability Allows Unspecified Attack

highCVE-2026-43495 CVE-2026-43496 CVE-2026-43497 CVE-2026-43498cert-bund2026-09-03

[NEW] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2026-80590 CVE-2026-80591 CVE-2026-80592 CVE-2026-80593cert-bund2026-09-03

[UPDATE] [medium] cURL: Multiple vulnerabilities

mediumCVE-2026-10536 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586cert-bund2026-09-02

[UPDATE] [high] FreeRDP: Multiple vulnerabilities

highCVE-2026-29774 CVE-2026-29775 CVE-2026-29776 CVE-2026-31806cert-bund2026-09-02

Mozilla Products Multiple Vulnerabilities

unknownCVE-2026-16365 CVE-2026-16371 CVE-2026-74952 CVE-2026-75874hkcert2026-09-02

Google Chrome Multiple Vulnerabilities

unknownCVE-2026-84323 CVE-2026-84324 CVE-2026-84325 CVE-2026-84326hkcert2026-09-02

RedHat Linux Kernel Multiple Vulnerabilities

unknownCVE-2025-21834 CVE-2026-23003 CVE-2026-43450 CVE-2026-43454hkcert2026-09-02

CVE-2026-18743: Popt-devel: popt-static: short realloc in poptconfigfiletostring

lowCVSS 2.5CVE-2026-18743msrc2026-09-02

CVE-2026-75538: A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

unknownCVE-2026-75538msrc2026-09-02

CVE-2026-71562: httpc does not bound server-supplied numeric header values before integer conversion

unknownCVE-2026-71562msrc2026-09-02

USN-8710-1: libevent vulnerabilities

unknownCVE-2026-63381 CVE-2026-63382 CVE-2026-63383 CVE-2026-63384ubuntu2026-09-01

NCSC-2026-0335 [1.00] [M/H] Vulnerabilities fixed in WatchGuard Fireware OS

unknownCVE-2026-13086 CVE-2026-19313 CVE-2026-19315 CVE-2026-19318ncsc-nl2026-09-01

Rockwell Automation Historian ME

criticalCVE-2025-12768 CVE-2026-12661cisa2026-09-01

Rockwell Automation RSLinx Classic

criticalCVE-2026-9621 CVE-2026-9622 CVE-2026-9624 CVE-2026-9625cisa2026-09-01

Rockwell Automation Logix Platform

criticalCVE-2026-9637cisa2026-09-01

[UPDATE] [high] ffmpeg RASC video decoder: Vulnerability enables Denial of Service and memory corruption

highCVE-2026-58049cert-bund2026-09-01

[UPDATE] [medium] libssh2: Multiple vulnerabilities

mediumCVE-2026-58050 CVE-2026-58051cert-bund2026-09-01

USN-8690-1: Pillow vulnerability

unknownCVE-2026-59198ubuntu2026-09-01

USN-8707-1: openCryptoki vulnerabilities

unknownCVE-2026-40253 CVE-2026-23893 CVE-2026-22791ubuntu2026-08-31

Other vulnerability classes

Remote code execution (2219)Privilege escalation (1662)Authentication bypass (1292)Denial of service (2399)Information disclosure (1760)Path traversal (266)Code injection (408)Cross-site scripting (344)Unsafe deserialization (87)SQL injection (151)Server-side request forgery (124)

New memory corruption advisories, in your inbox. The daily briefing covers every advisory in this class the morning after it lands. Subscribe free — one email every morning after 06:00 UTC, one-click unsubscribe. Tracking specific products instead? Watch them from any product page and get alerted only when they ship a new advisory.