Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2021-08-17 CVE-2021-29985 Use After Free vulnerability in Mozilla Thunderbird
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash.
network
low complexity
mozilla CWE-416
8.8
2021-08-16 CVE-2021-22940 Use After Free vulnerability in multiple products
Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
network
low complexity
nodejs oracle netapp siemens debian CWE-416
7.5
2021-08-12 CVE-2021-34486 Use After Free vulnerability in Microsoft products
Windows Event Tracing Elevation of Privilege Vulnerability
local
low complexity
microsoft CWE-416
7.8
2021-08-11 CVE-2021-1114 Use After Free vulnerability in Nvidia Jetson Linux
NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service.
local
low complexity
nvidia CWE-416
4.9
2021-08-11 CVE-2021-0012 Use After Free vulnerability in Intel Graphics Driver and Graphics Drivers
Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel CWE-416
2.1
2021-08-10 CVE-2020-21688 Use After Free vulnerability in multiple products
A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
6.8
2021-08-10 CVE-2020-21697 Use After Free vulnerability in multiple products
A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.
4.3
2021-08-10 CVE-2021-38381 Use After Free vulnerability in Live555
Live555 through 1.08 does not handle MPEG-1 or 2 files properly.
network
low complexity
live555 CWE-416
6.5
2021-08-10 CVE-2021-38382 Use After Free vulnerability in Live555
Live555 through 1.08 does not handle Matroska and Ogg files properly.
network
low complexity
live555 CWE-416
6.5
2021-08-10 CVE-2021-38383 Use After Free vulnerability in Owntone Project Owntone
OwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c.
network
low complexity
owntone-project CWE-416
7.5