#cwe-416

共收录 2312 条相关情报。

漏洞预警2026-06-29 发布INFO

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciou...

CVE-2026-43699

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-29 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web...

CVE-2026-43663

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-416

漏洞预警2026-06-29 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web...

CVE-2026-39872

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-416

漏洞预警2026-06-29 发布MEDIUM

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a par...

CVE-2026-13595

A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, an

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-416

漏洞预警2026-06-27 发布HIGH

Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be reused elsewhere whi...

CVE-2026-49417

CVE-2026-49417 涉及 Linux 内核音频子系统的释放后使用（Use-After-Free）漏洞。当音频设备关闭时，音频缓冲区映射对应的内存可能被错误释放，但映射仍然有效，导致释放后的内存可以被其他内核组件重用，同时攻击者仍可

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-27 发布HIGH

The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from userspace, then reacquired the lock. During this window another thr...

CVE-2026-49412

该漏洞存在于Linux内核的IPV6_MSFILTER套接字选项处理程序中。处理程序在从用户空间复制源过滤器列表时，会临时释放一个序列化锁，然后重新获取。在锁释放的窗口期内，另一个线程可能释放多播过滤器结构体，导致处理程序持有一个指向已释放

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-26 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter (envoy.filters.http.oauth2) ca...

CVE-2026-48090

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-26 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free (UAF) vulnerability leading...

CVE-2026-47205

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5,

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-26 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy crashes if an ext_proc server...

CVE-2026-47207

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

安全公告2026-06-26 发布INFO

Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote...

CVE-2026-13283

Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-416

安全公告2026-06-26 发布INFO

Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local...

CVE-2026-13282

Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially e

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-416 #severity:medium

漏洞预警2026-06-25 发布INFO

Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitr...

CVE-2026-13283

Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-25 发布INFO

Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially exploit heap corruption via physical access to the device....

CVE-2026-13282

Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially e

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-25 发布INFO

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 (released in 5.9.1): a malicious TLS 1.3 server sending a truncated PQC hyb...

CVE-2026-7531

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 (released in 5.9.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-25 发布INFO

A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) vi...

CVE-2025-60465

A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-25 发布INFO

A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) ...

CVE-2025-60464

A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-25 发布INFO

In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execut...

CVE-2026-12921

In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using spe

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-25 发布INFO

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitution performed by Nokogiri::XML::Node#do_xinclude replaced e...

CVE-2026-57438

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitutio

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-25 发布INFO

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its source document alive for garbag...

CVE-2026-57437

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPath

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-06-25 发布INFO

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Document#root= validated only that the new root was a Nokogiri...

CVE-2026-57436

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Docum

历史摘要 · 未重新核验 · NVD

#cve #cwe-416