Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2021-12-23 CVE-2021-4057 Use After Free vulnerability in multiple products
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2021-12-23 CVE-2021-4063 Use After Free vulnerability in multiple products
Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2021-12-23 CVE-2021-4064 Use After Free vulnerability in multiple products
Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2021-12-23 CVE-2021-4065 Use After Free vulnerability in multiple products
Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2021-12-23 CVE-2021-4067 Use After Free vulnerability in multiple products
Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2021-12-22 CVE-2021-45262 Use After Free vulnerability in Gpac 1.1.0
An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash.
local
low complexity
gpac CWE-416
5.5
2021-12-22 CVE-2021-45263 Use After Free vulnerability in Gpac 1.1.0
An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash.
local
low complexity
gpac CWE-416
5.5
2021-12-21 CVE-2021-45291 Use After Free vulnerability in Gpac 1.0.1
The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.
local
low complexity
gpac CWE-416
5.5
2021-12-17 CVE-2021-0893 Use After Free vulnerability in Google Android 10.0/11.0/12.0
In apusys, there is a possible memory corruption due to a use after free.
local
low complexity
google CWE-416
4.6
2021-12-17 CVE-2021-0898 Use After Free vulnerability in Google Android 10.0/11.0/12.0
In apusys, there is a possible memory corruption due to a use after free.
local
low complexity
google CWE-416
4.6