#cwe-416

共收录 2312 条相关情报。

← 返回所有主题
漏洞预警2026-06-25 发布INFO

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a Ruby wrapper pointing to free...

CVE-2026-57435

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby nat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Document#encoding= with an invalid encoding (e.g., a non-string, or a...

CVE-2026-57236

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Document#enc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompress z_erofs_decompress_kickoff() can race with filesystem unm...

CVE-2026-53272

In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompress

来源摘录 · NVD

漏洞预警2026-06-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() pppol2tp_ioctl() read sock->sk->sk_user_data ...

CVE-2026-53262

In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2

来源摘录 · NVD

漏洞预警2026-06-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfp_bus_del_upstr...

CVE-2026-53232

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fai

来源摘录 · NVD

漏洞预警2026-06-25 发布INFO

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a ...

CVE-2026-12245

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the serve

历史摘要 · 未重新核验 · NVD

安全公告2026-06-25 发布INFO

sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege...

CVE-2026-57589

sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-25 发布INFO

sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().

CVE-2026-57589

sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) v...

CVE-2025-60466

A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布INFO

A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Serv...

CVE-2025-60467

A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box

历史摘要 · 未重新核验 · NVD

安全公告2026-06-24 发布INFO

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote...

CVE-2026-13032

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially per

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local...

CVE-2026-13037

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote...

CVE-2026-13038

Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote...

CVE-2026-13035

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitra

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...

CVE-2026-13036

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote...

CVE-2026-13028

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially per

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker...

CVE-2026-13029

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a...

CVE-2026-13026

Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to poten

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...

CVE-2026-13031

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code ins

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-24 发布INFO

Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker...

CVE-2026-13027

Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exploit h

历史摘要 · 未重新核验 · GitHub Advisory