#cwe-416

共收录 2312 条相关情报。

← 返回所有主题
漏洞预警2026-06-16 发布INFO

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-12298

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintains a global list, xtensa_domain_list, of active memory dom...

CVE-2026-10635

On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintain

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a craf...

CVE-2025-55650

A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a craf...

CVE-2025-55644

A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the document was not checked against the length of th...

CVE-2026-6040

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which caches a pointe...

CVE-2026-10634

Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_S

历史摘要 · 未重新核验 · NVD

安全公告2026-06-13 发布INFO

Software installed and run as a non-privileged user may conduct GPU system calls to write to...

CVE-2026-41158

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-12 发布INFO

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the ...

CVE-2026-41158

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pa

历史摘要 · 未重新核验 · NVD

安全公告2026-06-12 发布INFO

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...

CVE-2026-12028

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...

CVE-2026-12035

Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...

CVE-2026-12029

Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...

CVE-2026-12007

Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in Media in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...

CVE-2026-12013

Use after free in Media in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote...

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...

CVE-2026-12011

Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local...

CVE-2026-12014

Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to pote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker...

CVE-2026-12023

Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a...

CVE-2026-12012

Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote...

CVE-2026-12020

Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially expl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who...

CVE-2026-12015

Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the re

历史摘要 · 未重新核验 · GitHub Advisory