#cwe-416

共收录 2389 条相关情报。

← 返回所有主题
漏洞预警2026-04-28 发布INFO

Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security seve...

CVE-2026-7333

Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object referenc...

CVE-2026-5943

Document structural anomalies caused inconsistencies between page element relationships and internal index states. When

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and c...

CVE-2026-5942

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

CVE-2026-5940

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, lea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.

CVE-2026-5939

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_HOOK After async crypto completes, xfrm_input_resume() c...

CVE-2026-31663

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_

来源摘录 · NVD

漏洞预警2026-04-13 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for...

CVE-2026-31419

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broad

来源摘录 · NVD

漏洞预警2026-03-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after unregi...

CVE-2026-23392

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu g

来源摘录 · NVD

漏洞预警2026-03-20 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catchall elements During transaction processing we might have...

CVE-2026-23278

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catch

来源摘录 · NVD

漏洞预警2026-03-20 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case that the set is full, a new...

CVE-2026-23272

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nel

来源摘录 · NVD

漏洞预警2026-02-18 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list xarray ksmbd_chann_list xarray lacks synchronization, all...

CVE-2026-23226

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list x

来源摘录 · NVD

漏洞预警2026-02-14 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer check in IRQ handler Now that all other accesses to curr_xfer are don...

CVE-2026-23207

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer check in IRQ

来源摘录 · NVD

漏洞预警2026-02-14 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens...

CVE-2026-23171

In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail aft

来源摘录 · NVD

漏洞预警2026-01-25 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() syzbot was able to crash the kernel in...

CVE-2026-23004

In the Linux kernel, the following vulnerability has been resolved: dst: fix races in rt6_uncached_list_del() and rt_de

来源摘录 · NVD

漏洞预警2026-01-13 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch series "Fix stale IOTLB entries for kernel address space", ...

CVE-2025-71089

In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch se

来源摘录 · NVD

漏洞预警2026-01-13 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbd_interrupt() schedules lk->tq via schedule_w...

CVE-2025-71073

In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing

来源摘录 · NVD

漏洞预警2026-01-13 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev3_register_work The dev3_register_work delayed work item...

CVE-2025-68822

In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev

来源摘录 · NVD

漏洞预警2025-12-30 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm device reference for hidinput input_dev name Reference the HID device rather tha...

CVE-2023-54207

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm device reference for hid

来源摘录 · NVD

漏洞预警2025-12-02 发布MEDIUM

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++...

CVE-2025-65955

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.

来源摘录 · NVD

漏洞预警2025-12-01 发布MEDIUM

A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a ...

CVE-2025-65407

A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows atta

来源摘录 · NVD