#cwe-416

共收录 2389 条相关情报。

← 返回所有主题
漏洞预警2026-05-07 发布INFO

Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, and Firefox ESR 115.35.2.

CVE-2026-8090

Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security...

CVE-2026-8016

Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium se...

CVE-2026-8002

Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perf...

CVE-2026-8001

Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML pa...

CVE-2026-7910

Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the render

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfs_attr_leaf_hasname The calling convention of xfs_attr_leaf_hasname() is problematic, because...

CVE-2026-43153

In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfs_attr_leaf_hasname The calling conv

来源摘录 · NVD

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit xfrm_policy_fini() frees the policy_bydst hash tables a...

CVE-2026-43091

In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit

来源摘录 · NVD

漏洞预警2026-05-05 发布INFO

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanis...

CVE-2026-23631

Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` w...

CVE-2026-23479

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not han

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

CVE-2026-24082

Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can...

CVE-2026-22166

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can...

CVE-2026-22165

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF cras

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain pla...

CVE-2026-22166

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain p...

CVE-2026-22165

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF cras

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the forc...

CVE-2026-43049

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on forc

来源摘录 · NVD

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). syzbot reported use-aft...

CVE-2026-43016

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket i

来源摘录 · NVD

安全公告2026-04-30 发布INFO

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

CVE-2026-5655

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

CVE-2026-5655

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. ...

CVE-2026-7111

Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stac

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...

CVE-2026-7361

Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap cor

历史摘要 · 未重新核验 · GitHub Advisory