Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2021-04-26 CVE-2021-21213 Use After Free vulnerability in multiple products
Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google debian fedoraproject CWE-416
8.8
2021-04-26 CVE-2021-21207 Use After Free vulnerability in multiple products
Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
local
low complexity
google debian fedoraproject CWE-416
8.6
2021-04-26 CVE-2021-21206 Use After Free vulnerability in multiple products
Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2021-04-26 CVE-2021-31804 Use After Free vulnerability in Leocad
LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document.
network
leocad CWE-416
4.3
2021-04-23 CVE-2021-22893 Use After Free vulnerability in Ivanti Connect Secure 9.0/9.1
Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway.
network
low complexity
ivanti CWE-416
critical
10.0
2021-04-22 CVE-2021-0270 Use After Free vulnerability in Juniper Junos 18.1
On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine (PFE) microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service (DoS) condition whereby one or more Flexible PIC Concentrators (FPCs) may restart.
network
juniper CWE-416
4.3
2021-04-22 CVE-2021-0262 Use After Free vulnerability in Juniper Junos 19.1/19.2/20.2
Through routine static code analysis of the Juniper Networks Junos OS software codebase, the Secure Development Life Cycle team identified a Use After Free vulnerability in PFE packet processing on the QFX10002-60C switching platform.
low complexity
juniper CWE-416
3.3
2021-04-21 CVE-2020-35980 Use After Free vulnerability in Gpac 0.8.0/1.0.1
An issue was discovered in GPAC version 0.8.0 and 1.0.1.
local
low complexity
gpac CWE-416
7.8
2021-04-19 CVE-2021-3497 Use After Free vulnerability in multiple products
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.
local
low complexity
gstreamer-project redhat debian CWE-416
7.8
2021-04-19 CVE-2021-27031 Use After Free vulnerability in Autodesk FBX Review 1.4.1.0/1.5.0
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system.
network
autodesk CWE-416
critical
9.3