#cwe-416

共收录 2247 条相关情报。

← 返回所有主题
漏洞预警2026-09-08 发布INFO

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and frees the perform...

CVE-2026-86713

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_c

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

PX4 Autopilot through 1.17.0 Use-After-Free in load_mon

CVE-2026-86713

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_c

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-07 发布MEDIUM

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a crafted list of...

CVE-2026-86425

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method

来源摘录 · NVD

漏洞预警2026-09-07 发布MEDIUM

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can...

CVE-2026-86423

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList metho

来源摘录 · NVD

安全公告2026-09-07 发布INFO

ImageMagick before 7.1.2-30 Heap-use-after-free via Layer

CVE-2026-86425

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-07 发布INFO

ImageMagick before 7.1.2-30 Heap-use-after-free via GetList

CVE-2026-86423

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList metho

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-07 发布INFO

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages

CVE-2026-82325

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the S...

CVE-2026-20517

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed...

CVE-2026-20515

In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with Use

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy...

CVE-2026-20511

In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the S...

CVE-2026-20507

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the S...

CVE-2026-20506

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration:...

CVE-2026-86096

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race co

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-04 发布MEDIUM

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race condition between task spawning and object deletion. Attack...

CVE-2026-86096

PX4 Autopilot 是一套广泛用于无人机和其他无人系统的开源飞行控制软件。本次漏洞(CVE-2026-86096)影响 1.17.0 及之前版本,具体位置在温度校准模块的 TemperatureCalibration::start(

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation...

CVE-2026-85197

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-aft

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls...

CVE-2026-45200

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-04 发布HIGH

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kern...

CVE-2026-45200

CVE-2026-45200 是一个 GPU 驱动相关的内核漏洞。根据 NVD 描述,该漏洞允许以非特权用户身份安装和运行的软件向 GPU 驱动发送精心构造的 IOCTL 调用序列,从而通过操纵分配接口上的特定标志组合,在后续释放操作中触发

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security...

CVE-2026-85049

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code insid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sa...

CVE-2026-85048

Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium sec...

CVE-2026-85042

Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code o

历史摘要 · 未重新核验 · NVD