#cwe-415

共收录 139 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta accumulator while recei...

CVE-2026-119338

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys t

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an appli...

CVE-2026-119116

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-29 发布HIGH

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-85890

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-83831

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x ser...

CVE-2026-88812

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

X.Org Server XKB SetGeometry TextDoodad Double Free

CVE-2026-88812

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-27 发布INFO

libyal libmsiecf through 20260525 contains a double free vulnerability in...

CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-26 发布INFO

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL r...

CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布HIGH

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the lo...

CVE-2026-112457

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a m...

CVE-2026-116260

A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the f

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data_ready_work_handler() (drivers/sensor/broadcom/a...

CVE-2026-78116

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails

历史摘要 · 未重新核验 · NVD

安全公告2026-10-21 发布INFO

Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path

CVE-2026-78116

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-20 发布INFO

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15....

CVE-2026-86962

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-16 发布MEDIUM

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful M...

CVE-2026-57446

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Valu

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-96864

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-95943

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-88149

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-85936

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85829

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows Error Reporting allows an authorized attacker to execute code locally.

CVE-2026-83916

Double free in Windows Error Reporting allows an authorized attacker to execute code locally.

来源摘录 · NVD