#cwe-416

共收录 2235 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta accumulator while recei...

CVE-2026-119338

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys t

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup() in Libraries/LibJS/Runtime/FinalizationRegistry.c...

CVE-2026-119332

Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cl

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an appli...

CVE-2026-119116

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary mem...

CVE-2026-65586

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path lead...

CVE-2026-15466

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in har

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-76031

Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insi

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...

CVE-2026-76028

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...

CVE-2026-76025

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security...

CVE-2026-119271

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insid

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-119269

Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code insi

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...

CVE-2026-119266

Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitra

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi...

CVE-2026-119260

Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code ins

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-96203

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

CVE-2026-96192

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

CVE-2026-85899

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used b...

CVE-2026-93516

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server b

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potential...

CVE-2026-93515

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 c

历史摘要 · 未重新核验 · NVD / OSV.dev

安全公告2026-10-28 发布INFO

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...

CVE-2026-118357

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute ar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...

CVE-2026-118344

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...

CVE-2026-118346

Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute a

历史摘要 · 未重新核验 · GitHub Advisory