Memory corruption vulnerabilities

buffer overflow / use-after-free1,308 advisories137 exploitedlatest 2026-08-25

Memory corruption covers buffer overflows, use-after-free and out-of-bounds reads/writes in native code. Successful exploitation typically yields code execution, which is why browser, OS kernel and network-stack memory bugs are prized by exploit developers and appear regularly in the KEV catalog.

Classification is assigned by the CSIRTS enrichment pipeline from the advisory text. The list below shows the latest advisories tagged memory corruption, newest first, across national CERTs, vendor PSIRTs and vulnerability databases — exploited marks CVEs in the CISA KEV catalog.

Latest memory corruption advisories

USN-8658-3: Linux kernel vulnerabilities

unknownCVE-2026-53224 CVE-2026-53246 CVE-2026-64531ubuntu2026-08-25

USN-8643-4: Linux kernel vulnerabilities

unknownCVE-2026-53224 CVE-2026-53246 CVE-2026-53247 CVE-2026-64531ubuntu2026-08-25

USN-8659-3: Linux kernel (Azure) vulnerability

unknownCVE-2026-64531ubuntu2026-08-25

USN-8675-1: Perl vulnerabilities

unknownCVE-2026-12087 CVE-2026-13221 CVE-2026-57432 CVE-2026-57433ubuntu2026-08-25

[NEW] [medium] libTIFF: Multiple Vulnerabilities

mediumCVE-2026-52490 CVE-2026-52492cert-bund2026-08-25

Bendix EC80 Brake ECU

criticalCVE-2026-67560 CVE-2026-68967 CVE-2026-71396cisa2026-08-25

[UPDATE] [medium] cURL: Multiple vulnerabilities

mediumCVE-2026-10536 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586cert-bund2026-08-25

[NEW] [UNPATCHED] [high] WebKitGTK: Vulnerability allows Code Execution

highCVE-2026-78376cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2026-31686 CVE-2026-31687 CVE-2026-31688 CVE-2026-31689cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2026-31535 CVE-2026-31536 CVE-2026-31537 CVE-2026-31538cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-31429 CVE-2026-31430cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-23271 CVE-2026-23272 CVE-2026-23273 CVE-2026-23274cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2025-68767 CVE-2025-68768 CVE-2025-68769 CVE-2025-68770cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71192 CVE-2025-71193 CVE-2025-71194 CVE-2025-71195cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2022-50712 CVE-2022-50713 CVE-2022-50714 CVE-2022-50715cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-40346 CVE-2025-40347 CVE-2025-40348 CVE-2025-40349cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2022-50697 CVE-2022-50698 CVE-2022-50699 CVE-2022-50700cert-bund2026-08-25

[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities

highCVE-2025-40178 CVE-2025-40179 CVE-2025-40180 CVE-2025-40181cert-bund2026-08-25

[NEW] [high] Apple macOS, iOS and iPadOS: Multiple vulnerabilities

highCVE-2026-28947 CVE-2026-28958 CVE-2026-28973 CVE-2026-28979cert-bund2026-08-25

[NEW] [high] ffmpeg: Multiple vulnerabilities

highCVE-2026-66036 CVE-2026-66037 CVE-2026-66038 CVE-2026-66039cert-bund2026-08-25

[NEW] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2024-14040 CVE-2026-64208 CVE-2026-64209 CVE-2026-64210cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2026-53326 CVE-2026-53327 CVE-2026-53328 CVE-2026-53329cert-bund2026-08-25

[UPDATE] [medium] libssh2: Multiple vulnerabilities

mediumCVE-2026-58050 CVE-2026-58051cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Vulnerability Allows Unspecified Attack

highCVE-2026-43495 CVE-2026-43496 CVE-2026-43497 CVE-2026-43498cert-bund2026-08-25

[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2025-71268 CVE-2025-71269 CVE-2025-71270 CVE-2026-23249cert-bund2026-08-24

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71265 CVE-2025-71266 CVE-2025-71267 CVE-2026-23242cert-bund2026-08-24

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71238 CVE-2026-23231 CVE-2026-23232 CVE-2026-23233cert-bund2026-08-24

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71225 CVE-2025-71226 CVE-2025-71227 CVE-2025-71228cert-bund2026-08-24

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71200 CVE-2025-71201 CVE-2025-71202 CVE-2025-71203cert-bund2026-08-24

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71180 CVE-2025-71181 CVE-2025-71182 CVE-2025-71183cert-bund2026-08-24

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-71145 CVE-2025-71146 CVE-2025-71147 CVE-2025-71148cert-bund2026-08-24

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-40086 CVE-2025-40087 CVE-2025-40088 CVE-2025-40089cert-bund2026-08-24

[NEW] [high] Redis: Multiple vulnerabilities

highCVE-2026-62356cert-bund2026-08-24

[NEW] [high] GStreamer: Multiple Vulnerabilities

highCVE-2026-18649cert-bund2026-08-24

[NEW] [medium] Linux Kernel: Multiple Vulnerabilities

mediumCVE-2026-64582 CVE-2026-64583 CVE-2026-64584 CVE-2026-64585cert-bund2026-08-24

[NEW] [medium] Linux Kernel: Multiple vulnerabilities

mediumCVE-2026-53359 CVE-2026-53360 CVE-2026-53361 CVE-2026-53362cert-bund2026-08-24

[UPDATE] [high] ffmpeg RASC video decoder: Vulnerability enables Denial of Service and memory corruption

highCVE-2026-58049cert-bund2026-08-24

Microsoft Edge Multiple Vulnerabilities

unknownCVE-2026-76033 CVE-2026-76034 CVE-2026-76035 CVE-2026-76037hkcert2026-08-24

USN-8669-1: Linux kernel (NVIDIA) vulnerabilities

unknownCVE-2025-71158 CVE-2025-71160 CVE-2025-71161 CVE-2025-71162ubuntu2026-08-21

USN-8643-3: Linux kernel (NVIDIA) vulnerabilities

unknownCVE-2026-53224 CVE-2026-53246 CVE-2026-53247 CVE-2026-64531ubuntu2026-08-21

USN-8659-2: Linux kernel (HWE) vulnerability

unknownCVE-2026-64531ubuntu2026-08-21

USN-8668-1: Linux kernel (GCP) vulnerabilities

unknownCVE-2023-45896 CVE-2025-54505 CVE-2025-54518 CVE-2022-49803ubuntu2026-08-21

USN-8667-1: Linux kernel (KVM) vulnerabilities

unknownCVE-2020-24588 CVE-2025-27558 CVE-2021-47378 CVE-2026-23392ubuntu2026-08-21

USN-8662-2: Linux kernel (FIPS) vulnerabilities

unknownCVE-2026-31405 CVE-2026-31414 CVE-2026-31448 CVE-2026-31649ubuntu2026-08-21

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

unknownCVE-2026-77234 CVE-2026-77235 CVE-2026-77236 CVE-2026-77237aws2026-08-21

[NEW] [medium] expat: Vulnerability enables denial of service

mediumCVE-2026-76641cert-bund2026-08-21

[UPDATE] [high] Golang Go: Multiple vulnerabilities

highCVE-2026-27140 CVE-2026-27143 CVE-2026-27144 CVE-2026-32280cert-bund2026-08-21

[UPDATE] [high] Linux Kernel: Multiple vulnerabilities

highCVE-2025-40112 CVE-2025-40113 CVE-2025-40115 CVE-2025-40116cert-bund2026-08-21

USN-8666-1: Linux kernel vulnerabilities

unknownCVE-2020-24588 CVE-2025-27558 CVE-2021-47378 CVE-2026-23392ubuntu2026-08-20

USN-8665-1: Linux kernel (Raspberry Pi) vulnerabilities

unknownCVE-2025-54505 CVE-2025-54518 CVE-2025-62626 CVE-2025-21709ubuntu2026-08-20

Other vulnerability classes

Remote code execution (2023)Privilege escalation (1548)Authentication bypass (1066)Denial of service (2105)Information disclosure (1543)Path traversal (235)Code injection (343)Cross-site scripting (315)Unsafe deserialization (83)SQL injection (143)Server-side request forgery (109)

New memory corruption advisories, in your inbox. The daily briefing covers every advisory in this class the morning after it lands. Subscribe free — one email every morning after 06:00 UTC, one-click unsubscribe. Tracking specific products instead? Watch them from any product page and get alerted only when they ship a new advisory.