#cwe-416

共收录 2289 条相关情报。

← 返回所有主题
漏洞预警2026-08-06 发布INFO

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e...

CVE-2026-19137

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapp...

CVE-2026-19108

A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetVa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布HIGH

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes int...

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all subm

来源摘录 · NVD

安全公告2026-08-04 发布INFO

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free....

CVE-2026-0163

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to rem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-04 发布INFO

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code...

CVE-2026-66315

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-04 发布INFO

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a...

CVE-2026-62870

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-04 发布HIGH

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-66315

CVE-2026-66315 是 Microsoft Edge(基于 Chromium)中的一个释放后使用(Use After Free)漏洞。该漏洞允许未经授权的攻击者通过网络远程执行代码,但攻击复杂度较高(AC:H),且需要用户交互(U

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-04 发布INFO

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-62870

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building a...

CVE-2026-69244

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap r

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

CVE-2026-69244

### Summary An out-of-bounds heap read could occur in the C response parser while building an error message for a malfo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In display, there is a possible memory corruption due to use after free. This could lead to local...

CVE-2026-20473

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System pr...

CVE-2026-20473

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

历史摘要 · 未重新核验 · NVD

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message...

CVE-2026-67299

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async...

CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAI

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOW_STATE_ORDER and NOTIFY_ICON_STATE_ORDER when Asy...

CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAI

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER when AsyncUpdate is enabled (e.g. xfreerdp /async-update...

CVE-2026-67299

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER

历史摘要 · 未重新核验 · NVD

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 Use-After-Free via async message proxy

CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAI

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message

CVE-2026-67299

FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-31 发布INFO

The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp() in subsys/bluetooth/host/gatt.c invoked the application's params->subscribe() callback after it ...

CVE-2026-10685

The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp() in subsys/bluetooth/host/gatt.c invoked

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or potentially execute a...

CVE-2026-63035

A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attack

历史摘要 · 未重新核验 · NVD