Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2019-07-24 CVE-2019-1010177 Use After Free vulnerability in Jsish 2.4.702.047
Jsish 2.4.70 2.047 is affected by: Use After Free.
network
low complexity
jsish CWE-416
critical
9.8
2019-07-23 CVE-2019-9821 Use After Free vulnerability in Mozilla Firefox
A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers.
network
high complexity
mozilla CWE-416
8.1
2019-07-23 CVE-2019-9820 Use After Free vulnerability in Mozilla Firefox ESR
A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use.
network
low complexity
mozilla CWE-416
critical
9.8
2019-07-23 CVE-2019-9818 Use After Free vulnerability in Mozilla Firefox
A race condition is present in the crash generation server used to generate data for the crash reporter.
network
high complexity
mozilla CWE-416
8.3
2019-07-23 CVE-2019-11713 Use After Free vulnerability in Mozilla Firefox
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash.
network
low complexity
mozilla CWE-416
critical
9.8
2019-07-23 CVE-2019-11692 Use After Free vulnerability in Mozilla Firefox
A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash.
network
low complexity
mozilla CWE-416
critical
9.8
2019-07-23 CVE-2019-11691 Use After Free vulnerability in Mozilla Thunderbird
A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed.
network
low complexity
mozilla CWE-416
critical
9.8
2019-07-23 CVE-2019-1010170 Use After Free vulnerability in Jsish 2.4.772.0477
Jsish 2.4.77 2.0477 is affected by: Use After Free.
network
low complexity
jsish CWE-416
7.5
2019-07-22 CVE-2019-2264 Use After Free vulnerability in Qualcomm products
Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SDM439, SDM630, SDM660, SDX24
local
low complexity
qualcomm CWE-416
7.8
2019-07-22 CVE-2019-2260 Use After Free vulnerability in Qualcomm products
A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, SDX20, SDX24, Snapdragon_High_Med_2016, SXR1130
local
high complexity
qualcomm CWE-416
7.0