By weakness (CWE)

CWE-763: related vulnerabilities

CVEs classified under CWE-763. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

4 published vulnerabilities

• CVE-2026-46116HIGH 7.8

  A memory safety bug exists in the Linux kernel's IPsec implementation where the xfrm_state subsystem can encounter use-after-free errors when network security policies are deleted or when network namespaces are torn down. The kernel's code was using inconsistent methods to track whether data structures were properly removed from internal lists, causing the same memory region to sometimes be deleted twice. This corrupts kernel memory and can lead to privilege escalation or denial of service on affected systems.

• CVE-2026-53000HIGH 7.8

  A memory management flaw in the Linux kernel's netfilter NAT (Network Address Translation) subsystem could allow a local, unprivileged attacker to crash the system or potentially execute code with elevated privileges. The vulnerability stems from improper deferred cleanup of NAT hook structures when they are exposed to userspace inspection, creating a use-after-free condition. An attacker with local access and standard user permissions could trigger this by interacting with netfilter hook dump functionality, leading to kernel instability or privilege escalation.

• CVE-2026-57248HIGH 7.8

  A vulnerability in Foxit PDF Editor and PDF Reader allows malicious JavaScript embedded in PDF files to crash the application by corrupting annotation data structures. When a PDF is opened, specially crafted JavaScript can write invalid annotation attributes that bypass type and argument validation, causing the application to fail during subsequent operations. This is a local attack that requires user interaction—someone must open a malicious PDF—but once triggered, results in denial of service and potentially exposes sensitive data through memory corruption.

• CVE-2026-9516HIGH 7.5

  Cpanel::JSON::XS, a popular Perl library for JSON processing, contains a vulnerability that can crash applications when they process JSON documents that start with a UTF-8 byte order mark (BOM) and use callback filters during decoding. The issue stems from incorrect memory pointer management: when a decode filter throws an exception, the library fails to properly restore the input scalar's internal pointer, leaving it in an invalid state. This corrupted state causes a crash when the memory is eventually freed. An attacker can trigger this denial of service by sending a specially crafted JSON document to any application using the vulnerable library with filtering enabled.