#cwe-416

共收录 2235 条相关情报。

← 返回所有主题
漏洞预警2026-10-21 发布INFO

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats A...

CVE-2026-111804

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unva

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. Th...

CVE-2026-109619

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be cor

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and lea...

CVE-2026-109618

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some co

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control m...

CVE-2026-74758

A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to cras

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A cli...

CVE-2026-97206

NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by

来源摘录 · NVD

安全公告2026-10-21 发布INFO

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE...

CVE-2026-114111

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool...

CVE-2026-114042

FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the ow

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布INFO

FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than t...

CVE-2026-114042

FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the ow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s...

CVE-2026-113344

Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary cod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security ...

CVE-2026-113339

Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu...

CVE-2026-113338

Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...

CVE-2026-113327

Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security ...

CVE-2026-113324

Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft...

CVE-2026-113323

Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...

CVE-2026-113321

Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...

CVE-2026-113319

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit...

CVE-2026-113314

Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...

CVE-2026-113311

Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security...

CVE-2026-113308

Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur...

CVE-2026-113305

Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code in

历史摘要 · 未重新核验 · NVD