#cwe-416

共收录 2247 条相关情报。

← 返回所有主题
漏洞预警2026-09-01 发布INFO

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunder...

CVE-2026-84122

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ES

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thun...

CVE-2026-84121

Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird...

CVE-2026-84120

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ES

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Th...

CVE-2026-84119

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Fire

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CVE-2026-84118

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderb

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a network packet it does not own. In the Zephyr TX path the ...

CVE-2026-14366

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a n

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

SiWx91x WiFi driver double-unref / use-after-free of caller-owned TX net_pkt

CVE-2026-14366

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a n

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-...

CVE-2026-82631

A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlocked

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free

CVE-2026-82631

A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlocked

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/historydata/ua_history_d...

CVE-2026-82623

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored_item_event_filter_treatment_bs__init_event_filter_ctx_and_result of ...

CVE-2026-82619

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored_item_event_

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free

CVE-2026-82623

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backe

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-31 发布INFO

Systerel S2OPC subscription_mgr.c use after free

CVE-2026-82619

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored_item_event_

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-28 发布MEDIUM

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-66798

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-08-28 发布INFO

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents be...

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing b...

CVE-2026-19316

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to creat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that ...

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-27 发布INFO

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remot...

CVE-2026-81934

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-d

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

Redis TLS pending-data list use-after-free

CVE-2026-81934

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-d

历史摘要 · 未重新核验 · OSV.dev