Vulnerabilities > Use After Free
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-11-27 | CVE-2018-5856 | Use After Free vulnerability in Google Android In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, due to a race condition, a Use After Free condition can occur in Audio. | 7.8 |
2018-11-27 | CVE-2018-11261 | Use After Free vulnerability in Google Android In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible Use-after-free issue in Media Codec process. | 7.8 |
2018-11-14 | CVE-2018-6072 | Use After Free vulnerability in multiple products An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. | 8.8 |
2018-11-14 | CVE-2018-6060 | Use After Free vulnerability in multiple products Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 8.8 |
2018-11-14 | CVE-2018-17474 | Use After Free vulnerability in multiple products Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 8.8 |
2018-11-14 | CVE-2018-17465 | Use After Free vulnerability in multiple products Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. | 8.8 |
2018-11-14 | CVE-2018-17462 | Use After Free vulnerability in multiple products Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page. | 9.6 |
2018-11-14 | CVE-2018-8544 | Use After Free vulnerability in Microsoft products A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. | 8.8 |
2018-11-12 | CVE-2018-19216 | Use After Free vulnerability in multiple products Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c. | 7.8 |
2018-11-06 | CVE-2018-9465 | Use After Free vulnerability in Google Android In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. | 7.8 |