CWE-416 · Use After Free (page 66)
Page 66 of 82 — CVEs classified under CWE-416, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-5869 | Medium | 6.5 | 2019-11-25 | Use after free in Blink in Google Chrome prior to 76.0.3809.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-5868 | Medium | 5.5 | 2019-11-25 | Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
CVE-2019-5860 | Medium | 5.5 | 2019-11-25 | Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
CVE-2019-5851 | High | 8.8 | 2019-11-25 | Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-5850 | Critical | 9.6 | 2019-11-25 | Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform… |
CVE-2019-5842 | Medium | 6.5 | 2019-11-25 | Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13723 | High | 8.8 | 2019-11-25 | Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
CVE-2019-13721 | High | 8.8 | 2019-11-25 | Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13720 | High | 8.8 | 2019-11-25 | Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13699 | High | 8.8 | 2019-11-25 | Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c… |
CVE-2019-13696 | High | 8.8 | 2019-11-25 | Use after free in JavaScript in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13695 | High | 8.8 | 2019-11-25 | Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2019-13694 | High | 8.8 | 2019-11-25 | Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13693 | High | 8.8 | 2019-11-25 | Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to execute arbitrary cod… |
CVE-2019-13688 | High | 8.8 | 2019-11-25 | Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13687 | High | 8.8 | 2019-11-25 | Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13686 | High | 8.8 | 2019-11-25 | Use after free in offline mode in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-13685 | High | 8.8 | 2019-11-25 | Use after free in sharing view in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2019-2336 | Medium | 5.5 | 2019-11-21 | Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2019-2329 | High | 7.8 | 2019-11-21 | Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10490 | Medium | 5.5 | 2019-11-21 | Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2015-1606 | Medium | 5.5 | 2019-11-20 | The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service (invalid read and use… |
CVE-2016-1000006 | Critical | 9.8 | 2019-11-19 | hhvm before 3.12.11 has a use-after-free in the serialize_memoize_param() and ResourceBundle::__construct() functions. |
CVE-2019-2213 | High | 7.4 | 2019-11-13 | In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no ad… |
CVE-2019-2205 | Critical | 9.8 | 2019-11-13 | In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote code executi… |
CVE-2011-2334 | Medium | 6.5 | 2019-11-12 | Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections. |
CVE-2019-1429 | High | 7.5 | 2019-11-12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory… |
CVE-2011-2353 | Medium | 6.5 | 2019-11-07 | Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function. |
CVE-2019-18814 | Critical | 9.8 | 2019-11-07 | An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/a… |
CVE-2019-10529 | High | 8.1 | 2019-11-06 | Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapd… |
CVE-2019-10528 | Critical | 9.8 | 2019-11-06 | Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon Connectivit… |
CVE-2019-10524 | High | 7.8 | 2019-11-06 | Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdragon Auto, Sn… |
CVE-2019-10515 | Medium | 5.5 | 2019-11-06 | DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT… |
CVE-2019-18178 | High | 7.5 | 2019-11-04 | Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by ffconfigFRE… |
CVE-2019-18683 | High | 7.0 | 2019-11-04 | An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributio… |
CVE-2019-17143 | Medium | 4.3 | 2019-10-25 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is req… |
CVE-2019-17142 | High | 8.8 | 2019-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to… |
CVE-2019-17141 | High | 8.8 | 2019-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to… |
CVE-2019-17140 | High | 8.8 | 2019-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to… |
CVE-2019-18408 | High | 7.5 | 2019-10-24 | archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, r… |
CVE-2019-18197 | High | 7.5 | 2019-10-18 | In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed… |
CVE-2019-8225 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8224 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8223 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8221 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8220 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006… |
CVE-2019-8219 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8217 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8215 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8214 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8213 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8212 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8211 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8210 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8209 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8208 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8203 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8192 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8188 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8187 | Medium | 4.3 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8181 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8180 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8179 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8178 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8177 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8176 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8175 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-17547 | High | 8.8 | 2019-10-14 | In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free. |
CVE-2019-17541 | High | 8.8 | 2019-10-14 | ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c. |
CVE-2019-17534 | High | 8.8 | 2019-10-13 | vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-afte… |
CVE-2019-2215 | High | 7.8 | 2019-10-11 | A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerab… |
CVE-2019-5527 | High | 8.8 | 2019-10-10 | ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of thi… |
CVE-2019-5053 | High | 7.8 | 2019-10-09 | An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in… |
CVE-2019-5047 | High | 7.8 | 2019-10-09 | An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resu… |
CVE-2019-6776 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2019-6775 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-6774 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interaction is required to exp… |
CVE-2019-13320 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13319 | High | 7.8 | 2019-10-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13317 | High | 7.8 | 2019-10-04 | This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2019-13316 | High | 7.8 | 2019-10-04 | This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2019-13315 | High | 7.8 | 2019-10-04 | This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to expl… |
CVE-2019-13332 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to exp… |
CVE-2019-13328 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13327 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-13326 | High | 7.8 | 2019-10-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exp… |
CVE-2019-17069 | High | 7.5 | 2019-10-01 | PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message. |
CVE-2019-2284 | High | 7.0 | 2019-09-30 | Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indust… |
CVE-2019-10509 | Critical | 9.8 | 2019-09-30 | Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… |
CVE-2019-10501 | High | 7.8 | 2019-09-30 | Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap… |
CVE-2019-10497 | High | 7.8 | 2019-09-30 | Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one. in Snapdragon Aut… |
CVE-2019-9431 | Medium | 4.9 | 2019-09-27 | In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to… |
CVE-2019-9427 | Medium | 5.5 | 2019-09-27 | In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information disclosure with no additional execution… |
CVE-2019-9381 | High | 7.5 | 2019-09-27 | In netd, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileg… |
CVE-2019-9350 | High | 7.8 | 2019-09-27 | In Keymaster, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed… |
CVE-2019-9347 | Medium | 5.5 | 2019-09-27 | In the m4v_h263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execu… |
CVE-2019-9268 | Medium | 5.5 | 2019-09-27 | In libstagefright, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no add… |
CVE-2019-9259 | Medium | 6.7 | 2019-09-27 | In the Bluetooth stack, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution… |
CVE-2019-11752 | High | 8.8 | 2019-09-27 | It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploi… |
CVE-2019-11746 | High | 8.8 | 2019-09-27 | A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable c… |