Search vulnerabilities

Results 12,177

CVE-2011-1301

Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0 · 9.3 Critical EPSS 3.7% KEV · Not listed
Vendors
Products
CVE-2014-1950

xen: use-after-free in xc_cpupool_getinfo() under memory pressure (XSA-88)

Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Xen
Products
Xen
CVE-2011-3904

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handling.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2010-2093

PHP: Context stream use-after-free on request shutdown (MOPS-2010-022)

Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Php
Products
Php
CVE-2012-3510

kernel: taskstats: use-after-free in xacct_add_tsk()

Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command.

CVSS 2.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2011-3913

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3957

Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF documents.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-3966

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to error handling for Cascading Style Sheets (CSS) token-sequence data.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3969

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout of SVG documents.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2013-2860

Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving access to a database API by a worker process.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2011-0475

Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.

CVSS 2.0 · 9.3 Critical EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2010-0175

Mozilla remote code execution with use-after-free in nsTreeSelection

Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.

CVSS 2.0 · 9.3 Critical EPSS 7.0% KEV · Not listed
Vendors
Products
CVE-2011-2790

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving floating styles.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-2818

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to display box rendering.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-2801

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the frame loader.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-2797

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to resource caching.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2010-0183

nsCycleCollector:: MarkRoots()

Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Products
CVE-2011-3023

Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to drag-and-drop operations.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2013-4127

kernel: vhost-net: use-after-free in vhost_net_flush

Use-after-free vulnerability in the vhost_net_set_backend function in drivers/vhost/net.c in the Linux kernel through 3.10.3 allows local users to cause a denial of service (OOPS and system crash) via vectors involving powering on a virtual machine.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2011-2373

Mozilla Use-after-free vulnerability when viewing XUL document with script disabled (MFSA 2011-20)

Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.

CVSS 2.0 · 7.6 High EPSS 5.0% KEV · Not listed
Vendors
Products