Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2020-05-21 CVE-2020-6463 Use After Free vulnerability in multiple products
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
8.8
2020-05-21 CVE-2020-6462 Use After Free vulnerability in multiple products
Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google debian CWE-416
critical
9.6
2020-05-21 CVE-2020-6461 Use After Free vulnerability in multiple products
Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google debian CWE-416
critical
9.6
2020-05-21 CVE-2020-6459 Use After Free vulnerability in multiple products
Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google debian CWE-416
8.8
2020-05-21 CVE-2020-6457 Use After Free vulnerability in multiple products
Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google debian CWE-416
critical
9.6
2020-05-18 CVE-2020-1897 Use After Free vulnerability in Facebook Proxygen
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence.
network
low complexity
facebook CWE-416
critical
9.8
2020-05-18 CVE-2020-6074 Use After Free vulnerability in Gonitro Nitro PRO 13.9.1.155
An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155.
network
low complexity
gonitro CWE-416
8.8
2020-05-18 CVE-2020-10958 Use After Free vulnerability in Dovecot
In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a command.
network
low complexity
dovecot CWE-416
5.3
2020-05-15 CVE-2018-10756 Use After Free vulnerability in multiple products
Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.
7.8
2020-05-13 CVE-2019-15878 Use After Free vulnerability in Freebsd 11.3/12.1
In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-free situation due to improper checking in SCTP when an application tries to update an SCTP-AUTH shared key.
local
low complexity
freebsd CWE-416
7.8