Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2018-10-02 CVE-2018-3943 Use After Free vulnerability in Foxitsoftware Phantompdf
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096.
network
low complexity
foxitsoftware CWE-416
8.8
2018-10-02 CVE-2018-9514 Use After Free vulnerability in Google Android
In sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause.
local
low complexity
google CWE-416
7.8
2018-10-02 CVE-2018-9476 Use After Free vulnerability in Google Android 8.0/8.1
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking.
network
low complexity
google CWE-416
critical
9.8
2018-09-28 CVE-2018-17611 Use After Free vulnerability in Foxitsoftware Phantompdf
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
network
low complexity
foxitsoftware CWE-416
critical
9.8
2018-09-28 CVE-2018-17610 Use After Free vulnerability in Foxitsoftware Phantompdf
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
network
low complexity
foxitsoftware CWE-416
critical
9.8
2018-09-28 CVE-2018-17609 Use After Free vulnerability in Foxitsoftware Phantompdf
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
network
low complexity
foxitsoftware CWE-416
critical
9.8
2018-09-28 CVE-2018-17608 Use After Free vulnerability in Foxitsoftware Phantompdf
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
network
low complexity
foxitsoftware CWE-416
critical
9.8
2018-09-28 CVE-2018-17607 Use After Free vulnerability in Foxitsoftware Phantompdf
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
network
low complexity
foxitsoftware CWE-416
critical
9.8
2018-09-26 CVE-2018-14809 Use After Free vulnerability in Fujielectric V-Server Firmware
Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote code execution.
network
low complexity
fujielectric CWE-416
critical
9.8
2018-09-25 CVE-2018-6054 Use After Free vulnerability in multiple products
Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
network
low complexity
google redhat debian CWE-416
8.8