#cwe-415

共收录 139 条相关情报。

← 返回所有主题
漏洞预警2026-10-09 发布INFO

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->...

CVE-2026-107886

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

CVE-2026-107886

CVE-2026-107886

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-05 发布INFO

In apu, there is a possible application crash due to double free. This could lead to local denial...

CVE-2026-20532

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no add

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is ...

CVE-2026-20532

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no add

历史摘要 · 未重新核验 · NVD

安全公告2026-09-24 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19...

CVE-2026-89078

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 1

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-24 发布CRITICAL

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could hav...

CVE-2026-89078

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 1

来源摘录 · NVD / OSV.dev

安全公告2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect...

CVE-2026-6794

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and...

CVE-2026-6794

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS,...

CVE-2026-91018

lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.

CVE-2026-91018

lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 b...

CVE-2026-11388

Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Conn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

The experimental USB host stack allocates a per-device configuration-descriptor buffer, udev->cfg_desc, from the dedicated usb_device_heap in usbh_device_set_configuration() (su...

CVE-2026-17050

The experimental USB host stack allocates a per-device configuration-descriptor buffer, udev->cfg_desc, from the dedicat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device ...

CVE-2026-20135

A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the c...

CVE-2026-57842

NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-09 发布INFO

An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH contain...

CVE-2026-61915

An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges loca...

CVE-2026-69398

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

CVE-2026-69337

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

CVE-2026-69322

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-69309

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69292

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD