Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2021-03-03 CVE-2020-13558 Use After Free vulnerability in Webkitgtk 2.30.1
A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1.
network
webkitgtk CWE-416
6.8
2021-03-03 CVE-2021-22662 Use After Free vulnerability in Fatek Fvdesigner
A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.
network
fatek CWE-416
6.8
2021-03-03 CVE-2020-25632 Use After Free vulnerability in multiple products
A flaw was found in grub2 in versions prior to 2.06.
local
low complexity
gnu redhat fedoraproject netapp CWE-416
8.2
2021-02-25 CVE-2021-24070 Use After Free vulnerability in Microsoft products
Microsoft Excel Remote Code Execution Vulnerability
local
low complexity
microsoft CWE-416
7.8
2021-02-25 CVE-2021-24067 Use After Free vulnerability in Microsoft products
Microsoft Excel Remote Code Execution Vulnerability
local
low complexity
microsoft CWE-416
7.8
2021-02-23 CVE-2021-20226 Use After Free vulnerability in multiple products
A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existence of an object prior to performing operations on the object by not incrementing the file reference counter while in use.
local
low complexity
linux netapp CWE-416
7.8
2021-02-22 CVE-2021-21157 Use After Free vulnerability in multiple products
Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
microsoft fedoraproject google CWE-416
8.8
2021-02-22 CVE-2021-21151 Use After Free vulnerability in multiple products
Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
critical
9.6
2021-02-22 CVE-2021-21150 Use After Free vulnerability in multiple products
Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
critical
9.6
2021-02-22 CVE-2020-11277 Use After Free vulnerability in Qualcomm products
Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
6.9