#cwe-416

共收录 2289 条相关情报。

← 返回所有主题
漏洞预警2026-07-27 发布INFO

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program still accesses internal mem...

CVE-2026-51298

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory a...

CVE-2026-51297

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed at line 3555, while line 3575 still calls jsonLookupStep ...

CVE-2026-51296

SQLite 3.41 has a use-after-free vulnerability in jsonRemoveFunc of SQLite JSON module. The parsed JSON object is freed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41_hda creates ALSA controls whose private data poi...

CVE-2026-64481

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown

来源摘录 · NVD

漏洞预警2026-07-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-free on shutdown path There is a use-after-free error on netpoll, which is clearly...

CVE-2026-64424

In the Linux kernel, the following vulnerability has been resolved: netpoll: fix a use-after-free on shutdown path The

来源摘录 · NVD

漏洞预警2026-07-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehci_iso_sched befor...

CVE-2026-64348

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and

来源摘录 · NVD

漏洞预警2026-07-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure after r...

CVE-2026-64341

In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect ra

来源摘录 · NVD

漏洞预警2026-07-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with service_lock The service_table list is protected by ser...

CVE-2026-64305

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with

来源摘录 · NVD

安全公告2026-07-24 发布INFO

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to...

CVE-2026-16805

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to...

CVE-2026-16806

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who...

CVE-2026-16804

Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the rende

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-22 发布INFO

An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue invol...

CVE-2026-13071

An authenticated user with read access can cause the mongod process to be terminated through certain aggregation express

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that ...

CVE-2026-52863

In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS (DoT) forwarded queries is tied to a struct's ('serviced_query') lifetime but ...

CVE-2026-50046

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS (DoT) forwarded queri

历史摘要 · 未重新核验 · NVD

安全公告2026-07-22 发布INFO

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-22 发布INFO

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who...

CVE-2026-16423

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-21 发布INFO

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc...

CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrup...

CVE-2026-16423

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, lead...

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invok

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause und...

CVE-2026-60080

Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.

历史摘要 · 未重新核验 · NVD