#cwe-416

共收录 2389 条相关情报。

← 返回所有主题
漏洞预警2026-05-14 发布INFO

Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a s...

CVE-2026-8512

Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-14 发布INFO

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security sever...

CVE-2026-8511

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

When BIG-IP PEM iRules are configured on a virtual server (iRules using commands starting with CLASSIFICATION::, CLASSIFY::, PEM::, PSC::, and the urlcatquery command), undisclo...

CVE-2026-41218

When BIG-IP PEM iRules are configured on a virtual server (iRules using commands starting with CLASSIFICATION::, CLASSIF

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp direc...

CVE-2026-40701

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client direc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently cr...

CVE-2026-8336

After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering ...

CVE-2026-8201

A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting clie

历史摘要 · 未重新核验 · NVD

安全公告2026-05-12 发布INFO

Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in...

CVE-2026-45185

Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing p

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-12 发布INFO

Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_noti...

CVE-2026-45185

Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-42825

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

CVE-2026-41095

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-40419

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

CVE-2026-40418

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-40415

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

CVE-2026-40410

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-40408

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

CVE-2026-40406

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

CVE-2026-40402

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-40382

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40366

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40361

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD