#cwe-416

共收录 2289 条相关情报。

← 返回所有主题
漏洞预警2026-07-08 发布INFO

The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before deletion, triggeri...

CVE-2026-57247

The application re-enters the document structure via field processing and deletes the current page, and then continues u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationships and field combin...

CVE-2026-57245

When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to valida

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer dur...

CVE-2026-57244

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verifica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the ...

CVE-2026-57242

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid pointer references and ...

CVE-2026-57240

When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old fie

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the application to crash.

CVE-2026-57238

After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid...

CVE-2026-57237

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the under

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to C...

CVE-2026-56000

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing ...

CVE-2026-13129

When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually lea...

CVE-2026-13128

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnail...

CVE-2026-13127

The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, result...

CVE-2026-13126

The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a...

CVE-2026-60002

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-08 发布INFO

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

The application contains a use-after-free vulnerability that can be exploited to cause memory...

CVE-2026-42958

The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-07 发布INFO

The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to e...

CVE-2026-42958

The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing s

历史摘要 · 未重新核验 · NVD

安全公告2026-07-06 发布INFO

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

CVE-2025-59617

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when invoking device input/output control operations for mapping and unmapping...

CVE-2025-59615

Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input...

CVE-2025-59616

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing alrea

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-06 发布INFO

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

CVE-2025-59617

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

历史摘要 · 未重新核验 · NVD