#cwe-416

共收录 2389 条相关情报。

← 返回所有主题
安全公告2026-05-20 发布INFO

Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote...

CVE-2026-9111

Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrar

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-9126

Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9120

Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code vi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity...

CVE-2026-9118

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium ...

CVE-2026-9114

Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium...

CVE-2026-9112

Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severi...

CVE-2026-9111

Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrar

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue...

CVE-2026-3593

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to vali...

CVE-2026-5947

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incomi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 ...

CVE-2026-3593

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a r...

CVE-2026-33278

NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables de

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 15...

CVE-2026-8953

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 15

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140...

CVE-2026-8947

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.

CVE-2026-47310

Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.

CVE-2026-28733

in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

ImageMagick: Use-After-Free in MSL decoder.

CVE-2026-46523

A crafted MSL image can trigger a heap-use-after-free.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the...

CVE-2026-8696

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or po...

CVE-2026-8696

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that a

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that...

CVE-2026-8695

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

rkyv: Panic safety bugs in `InlineVec::clear` and `SerVec::clear` enable arbitrary code execution

`InlineVec::clear()` and `SerVec::clear()` in `rkyv` were not panic-safe. Both functions iterate over their elements and

历史摘要 · 未重新核验 · GitHub Advisory