Search vulnerabilities

Results 12,177

CVE-2011-3928

Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
CVE-2011-3038

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to multi-column handling.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3659

Mozilla: child nodes from nsDOMAttribute still accessible after removal of nodes (MFSA 2012-04)

Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.

CVSS 2.0 · 9.3 Critical EPSS 36.8% KEV · Not listed
Vendors
Mozilla Opensuse Redhat and 1 more
Products
CVE-2012-5125

Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-0982

Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG font faces.

CVSS 2.0 · 10.0 Critical EPSS 2.6% KEV · Not listed
Vendors
Products
CVE-2011-3882

Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media buffers.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2012-1958

Mozilla: use-after-free in nsGlobalWindow::PageHidden (MFSA 2012-48)

Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.

CVSS 2.0 · 9.3 Critical EPSS 4.8% KEV · Not listed
Vendors
Products
CVE-2010-3766

Mozilla use-after-free error with nsDOMAttribute MutationObserver (MFSA 2010-80)

Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.

CVSS 2.0 · 9.3 Critical EPSS 7.0% KEV · Not listed
Vendors
CVE-2012-5137

Use-after-free vulnerability in Google Chrome before 23.0.1271.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Media Source API.

CVSS 2.0 · 10.0 Critical EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2010-1320

krb5: double-free vulnerability in 1.7+

Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a request associated with (1) renewal or (2) validation.

CVSS 2.0 · 4.0 Medium EPSS 11.9% KEV · Not listed
Vendors
Mit
Products
CVE-2012-5140

Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader.

CVSS 2.0 · 10.0 Critical EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2012-1972

Mozilla: Multiple Use-after-free issues (MFSA 2012-58)

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
CVE-2011-3042

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of table sections.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2012-1973

Mozilla: Multiple Use-after-free issues (MFSA 2012-58)

Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
CVE-2010-1414

WebKit: use-after-free vulnerability in handling of the removeChild DOM method

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the removeChild DOM method.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed
Vendors
Products
CVE-2011-2346

Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG fonts.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-2349

Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text selection.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-3043

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox (aka flexible box) in conjunction with the floating of elements.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2012-1974

Mozilla: Multiple Use-after-free issues (MFSA 2012-58)

Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
CVE-2011-3035

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more