Topic
5 articles
CyberSecureToday covers CWE-416 across 5 articles published between 1 Oct 2026 and 18 Oct 2026.
The coverage includes 5 vulnerability advisories. 5 advisories are rated critical or high severity.
Stories on CWE-416 most often intersect with Use After Free, Remote Code Execution and Memory Corruption, with Technology, Cloud & SaaS the most affected sector. The most recent story, “MariaDB Critical RCE Chain Exploits SYS_REFCURSOR Use-After-Free and ST_Area Over-Read”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelA critical exploit chain in MariaDB combined a cursor-array use-after-free with a geospatial memory disclosure to achieve command execution from low-privilege accounts.
Threat IntelA heap use-after-free defect in libcurl's HTTP/2 streaming upload engine enabled memory corruption when paused streams were aborted or reset.
Threat IntelF5 NGINX resolves a critical use-after-free vulnerability in HTTP/3 QUIC stream processing (CVE-2026-97205) allowing worker process termination and code execution.
Threat IntelA critical use-after-free flaw in Python's ssl module allows remote unauthenticated clients to crash TLS servers or hijack function pointers via SNI callbacks.
Threat IntelA critical heap use-after-free vulnerability in ESnet iperf3 v3.21 allows unauthenticated remote attackers to crash network test daemons or execute code.