#cwe-416

共收录 2235 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can ...

CVE-2026-109268

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats and device without joining play_threa...

CVE-2026-109254

FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000

CVE-2026-109268

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writ

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-12 发布INFO

A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_im...

CVE-2026-108094

A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.

CVE-2026-21120

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a struct k_work embedded in the channel object (le_chan->rx_wo...

CVE-2026-19935

The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a str

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown

CVE-2026-19935

The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a str

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation...

CVE-2026-108539

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_q

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the file utils/os_thread.c of the component MP4Box. Such manipu...

CVE-2026-108538

A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code exec...

CVE-2026-95702

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacke

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

CVE-2026-95702

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacke

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-06 发布INFO

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no add...

CVE-2026-55330

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-106423

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code insi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security ...

CVE-2026-106421

Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (C...

CVE-2026-106419

Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi...

CVE-2026-106411

Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbo...

CVE-2026-106393

Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rend

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-106383

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code insi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium s...

CVE-2026-106382

Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch...

CVE-2026-106373

Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbit

历史摘要 · 未重新核验 · NVD