Search vulnerabilities

Results 12,177

CVE-2012-1539

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreePos Use After Free Vulnerability."

CVSS 3.1 · 8.1 High EPSS 28.3% KEV · Not listed
Vendors
Products
CVE-2011-3071

Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3904

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handling.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2010-1771

WebKit: use-after-free vulnerability in font handling

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving fonts.

CVSS 2.0 · 9.3 Critical EPSS 6.3% KEV · Not listed
Vendors
Products
CVE-2011-3913

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3885

Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets (CSS) token-sequence data.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3073

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3075

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2012-2133

kernel: use after free bug in "quota" handling

Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.

CVSS 2.0 · 4.0 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2011-3053

Webkitgtk: google chrome update [21-March-2012]

Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-0072

Mozilla use after free flaw (MFSA 2011-12)

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0074, CVE-2011-0075, CVE-2011-0077, and CVE-2011-0078.

CVSS 2.0 · 10.0 Critical EPSS 5.4% KEV · Not listed
Vendors
Products
CVE-2011-3041

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2010-1815

webkit: use-after-free flaw when handling scrollbars

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed
Vendors
Apple Canonical Redhat and 1 more
Products
CVE-2011-3039

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to quote handling.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2013-0767

Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)

The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Products
CVE-2012-5125

Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2013-0781

Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)

Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 3.9% KEV · Not listed
Products
CVE-2013-0780

Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)

Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-column-* properties.

CVSS 2.0 · 9.3 Critical EPSS 4.4% KEV · Not listed
Vendors
Canonical Debian Mozilla and 2 more
Products
CVE-2010-0050

webkitgtk: multiple security vulnerabilities in WebKit

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

CVSS 3.1 · 8.8 High EPSS 11.6% KEV · Not listed
Vendors
Products
CVE-2013-0777

Mozilla: Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer (MFSA 2013-28)

Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed
Products