Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2021-04-13 CVE-2021-28454 Use After Free vulnerability in Microsoft products
Microsoft Excel Remote Code Execution Vulnerability
local
low complexity
microsoft CWE-416
7.8
2021-04-13 CVE-2021-0442 Use After Free vulnerability in Google Android 11.0
In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free.
local
low complexity
google CWE-416
4.6
2021-04-13 CVE-2021-0429 Use After Free vulnerability in Google Android
In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free.
local
low complexity
google CWE-416
4.6
2021-04-11 CVE-2020-36318 Use After Free vulnerability in Rust-Lang Rust 1.48.0
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition.
network
low complexity
rust-lang CWE-416
7.5
2021-04-09 CVE-2021-21199 Use After Free vulnerability in multiple products
Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2021-04-09 CVE-2021-21195 Use After Free vulnerability in multiple products
Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2021-04-09 CVE-2021-21194 Use After Free vulnerability in multiple products
Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2021-04-07 CVE-2021-29627 Use After Free vulnerability in Freebsd
In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string.
local
low complexity
freebsd CWE-416
7.2
2021-04-07 CVE-2021-29626 Use After Free vulnerability in Freebsd
In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process to maintain a mapping after it is freed, allowing the process to read private data belonging to other processes or the kernel.
local
low complexity
freebsd CWE-416
2.1
2021-04-07 CVE-2020-11234 Use After Free vulnerability in Qualcomm products
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
local
low complexity
qualcomm CWE-416
7.2