#cwe-416

共收录 2235 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布HIGH

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi...

CVE-2026-118344

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code ins

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu...

CVE-2026-118341

Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...

CVE-2026-118339

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arb

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium ...

CVE-2026-118334

Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary co

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (...

CVE-2026-118330

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arb

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-118313

Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insi

来源摘录 · NVD

漏洞预警2026-10-27 发布CRITICAL

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom...

CVE-2026-118308

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...

CVE-2026-118307

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitra

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

CVE-2026-108333

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia ...

CVE-2026-86916

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Ga...

CVE-2026-112655

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Ga...

CVE-2026-112651

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 2...

CVE-2026-112637

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Ga...

CVE-2026-112626

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Ga...

CVE-2026-112623

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57187

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-23 发布INFO

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message `first` lease pointer so mu...

CVE-2026-53918

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 I

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

CVE-2026-112396

### Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

CVE-2026-112402

``` ============================================================================ Double free in ImagingScaleAffine on ca

历史摘要 · 未重新核验 · GitHub Advisory