#cwe-415

共收录 139 条相关情报。

← 返回所有主题
漏洞预警2026-05-18 发布INFO

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free con...

CVE-2026-32848

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem

历史摘要 · 未重新核验 · NVD

安全公告2026-05-16 发布INFO

libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to...

CVE-2020-37239

libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety check

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-16 发布INFO

libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. At...

CVE-2020-37239

libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety check

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

rkyv: Panic safety bugs in `InlineVec::clear` and `SerVec::clear` enable arbitrary code execution

`InlineVec::clear()` and `SerVec::clear()` in `rkyv` were not panic-safe. Both functions iterate over their elements and

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-14 发布INFO

PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in compute_hash_to_sign() in src/podofo/private/OpenSSLInternal_Ripped...

CVE-2026-44348

PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in compute_ha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

CVE-2026-34341

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-33838

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Double free in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-32170

Double free in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

CVE-2026-21530

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_...

CVE-2026-43414

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free I

来源摘录 · NVD

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: protect xen_9pfs_front_free against concurrent calls The xenwatch thread can race with other back-e...

CVE-2026-43249

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: protect xen_9pfs_front_free against concurr

来源摘录 · NVD

漏洞预警2026-05-04 发布INFO

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to v...

CVE-2026-23918

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HT

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5657

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5657

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · NVD

漏洞预警2025-08-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsv_qp rsv_qp may be double destroyed in error flow, first in free_mr_i...

CVE-2025-38582

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsv_qp rsv_qp

来源摘录 · NVD

漏洞预警2025-06-18 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Fix a kernel oops found while testi...

CVE-2025-38069

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Fix double free that c

来源摘录 · NVD

漏洞预警2025-01-31 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server in cifs_put_tcp_ses...

CVE-2025-21673

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::ho

来源摘录 · NVD

漏洞预警2024-07-30 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_timeout, the amdgpu_um...

CVE-2024-42123

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnin

来源摘录 · NVD

漏洞预警2024-07-30 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that is not NULL In the MediaTek vcodec driver, while mtk_vcod...

CVE-2023-52888

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free buffer VA that i

来源摘录 · NVD