#cwe-416

共收录 2235 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-113025

Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu...

CVE-2026-113024

Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu...

CVE-2026-113021

Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu...

CVE-2026-113019

Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-113017

Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur...

CVE-2026-113015

Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML ...

CVE-2026-113014

Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted H...

CVE-2026-113011

Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (...

CVE-2026-113009

Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arb

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur...

CVE-2026-113001

Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security ...

CVE-2026-112999

Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...

CVE-2026-112995

Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-112993

Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布CRITICAL

When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and ...

CVE-2026-92388

When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving t

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or ...

CVE-2026-113869

When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decryp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with `txm_module_object_de...

CVE-2026-94192

A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia ...

CVE-2026-86913

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast pat...

CVE-2026-112402

Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encount

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When a...

CVE-2026-112396

Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a ta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and poten...

CVE-2026-112261

A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-aft

历史摘要 · 未重新核验 · NVD