Topic

Use After Free: news, advisories and analysis

5 articlesUpdated 18 Oct 2026

CyberSecureToday covers Use After Free across 5 articles published between 16 Sep 2026 and 18 Oct 2026. The coverage includes 5 vulnerability advisories. 5 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Use After Free most often intersect with Remote Code Execution, Memory Corruption and CWE-416, with Technology, Cloud & SaaS the most affected sector. The most recent story, “MariaDB Critical RCE Chain Exploits SYS_REFCURSOR Use-After-Free and ST_Area Over-Read”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
MariaDB Critical RCE Chain Exploits SYS_REFCURSOR Use-After-Free and ST_Area Over-Read
A critical exploit chain in MariaDB combined a cursor-array use-after-free with a geospatial memory disclosure to achieve command execution from low-privilege accounts.
CST Editorial Desk18 Oct 202616 min read
ThreatsCloud & SaaSHigh
libcurl HTTP/2 Streaming Upload Use-After-Free Flaw Exposes Client Applications to Memory Corruption
A heap use-after-free defect in libcurl's HTTP/2 streaming upload engine enabled memory corruption when paused streams were aborted or reset.
Priya Raman18 Oct 202615 min read
ThreatsCloud & SaaSCritical
NGINX Plus & Open Source HTTP/3 QUIC Stream Use-After-Free Flaw CVE-2026-97205 Remediated
F5 NGINX resolves a critical use-after-free vulnerability in HTTP/3 QUIC stream processing (CVE-2026-97205) allowing worker process termination and code execution.
CST Editorial Desk15 Oct 20268 min read
ThreatsCloud & SaaSCritical
Apache HTTP Server mod_http2 Use-After-Free Flaw Exposes Web Fleets to Remote Exploitation (CVE-2026-57941)
A critical use-after-free in Apache HTTP Server mod_http2 via shared session bucket brigades enables remote unauthenticated memory corruption.
Mei-Lin Chen2 Oct 20269 min read
ThreatsCloud & SaaSHigh
Microsoft Windows WinSock Driver Zero-Day Flaw CVE-2026-68820 Exploited by Ransomware Groups for SYSTEM Takeover
CISA warns of in-the-wild exploitation of CVE-2026-68820, a use-after-free vulnerability in the Windows Ancillary Function Driver (afd.sys) granting SYSTEM privilege.
Daniel Okafor16 Sep 20269 min read

Latest coverage

MariaDB Critical RCE Chain Exploits SYS_REFCURSOR Use-After-Free and ST_Area Over-Read

libcurl HTTP/2 Streaming Upload Use-After-Free Flaw Exposes Client Applications to Memory Corruption

NGINX Plus & Open Source HTTP/3 QUIC Stream Use-After-Free Flaw CVE-2026-97205 Remediated

Apache HTTP Server mod_http2 Use-After-Free Flaw Exposes Web Fleets to Remote Exploitation (CVE-2026-57941)

Microsoft Windows WinSock Driver Zero-Day Flaw CVE-2026-68820 Exploited by Ransomware Groups for SYSTEM Takeover