Skip to main content

Use After Free

6847 CVEs technique

Monthly

CVE-2012-1972 Aug 29, 10:56 CRITICAL Act Now

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Use After Free Memory Corruption +20
NVD
CVSS 2.0
10.0
EPSS
3.3%
CVE-2012-1521 May 01, 10:12 MEDIUM POC This Month

Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Denial Of Service Chrome Google Use After Free Memory Corruption +4
NVD
CVSS 2.0
6.8
EPSS
7.4%
CVE-2012-1180 Apr 17, 21:55 MEDIUM PATCH This Month

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Debian Nginx +4
NVD
CVSS 2.0
5.0
EPSS
3.1%
CVE-2012-1845 Mar 22, 16:55 CRITICAL Act Now

Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute arbitrary code, via unspecified vectors, as. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Chrome Google Use After Free Memory Corruption
NVD
CVSS 2.0
9.3
EPSS
1.9%
CVE-2024-43374 May 27, 22:00 MEDIUM POC PATCH This Month

Alpine Linux: vim fixed in 9.1.0678-r0

Information Disclosure Use After Free Memory Corruption Bootstrap Os Vim +3
NVD GitHub
CVSS 3.1
4.5
EPSS
0.1%
CVE-2024-41965 May 27, 22:00 MEDIUM POC PATCH This Month

Alpine Linux: vim fixed in 9.1.0652-r0

Information Disclosure Use After Free Memory Corruption Vim Hci Compute Node +2
NVD GitHub
CVSS 3.1
4.2
EPSS
0.1%
CVE-2024-9680 May 27, 22:00 CRITICAL POC KEV PATCH THREAT Act Now

Alpine Linux: mozjs fixed in 128.3.1-r0

Information Disclosure Use After Free Memory Corruption Debian Mozilla +2
NVD VulDB
CVSS 3.1
9.8
EPSS
30.8%
Threat
5.9
EPSS 3% CVSS 10.0
CRITICAL Act Now

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +22
NVD
EPSS 7% CVSS 6.8
MEDIUM POC This Month

Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Denial Of Service Chrome Google +6
NVD
EPSS 3% CVSS 5.0
MEDIUM PATCH This Month

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption +6
NVD
EPSS 2% CVSS 9.3
CRITICAL Act Now

Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute arbitrary code, via unspecified vectors, as. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Chrome Google +2
NVD
EPSS 0% CVSS 4.5
MEDIUM POC PATCH This Month

Alpine Linux: vim fixed in 9.1.0678-r0

Information Disclosure Use After Free Memory Corruption +5
NVD GitHub
EPSS 0% CVSS 4.2
MEDIUM POC PATCH This Month

Alpine Linux: vim fixed in 9.1.0652-r0

Information Disclosure Use After Free Memory Corruption +4
NVD GitHub
EPSS 31% 5.9 CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

Alpine Linux: mozjs fixed in 128.3.1-r0

Information Disclosure Use After Free Memory Corruption +4
NVD VulDB
Prev Page 77 of 77

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy