Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2018-03-14 CVE-2018-0935 Use After Free vulnerability in Microsoft Internet Explorer 10/11/9
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
network
high complexity
microsoft CWE-416
7.5
2018-03-09 CVE-2016-9591 Use After Free vulnerability in multiple products
JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
local
low complexity
jasper-project redhat debian CWE-416
5.5
2018-03-09 CVE-2018-6916 Use After Free vulnerability in Freebsd
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host.
network
low complexity
freebsd CWE-416
critical
9.8
2018-03-05 CVE-2017-18220 Use After Free vulnerability in Graphicsmagick 1.3.26
The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service (magick/blob.c CloseBlob use-after-free) or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403.
network
low complexity
graphicsmagick CWE-416
8.8
2018-03-05 CVE-2017-18218 Use After Free vulnerability in Linux Kernel
In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by leveraging differences in skb handling between hns_nic_net_xmit_hw and hns_nic_net_xmit.
local
low complexity
linux CWE-416
7.8
2018-03-05 CVE-2018-0491 Use After Free vulnerability in Torproject TOR
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10.
network
low complexity
torproject CWE-416
7.5
2018-02-28 CVE-2018-7554 Use After Free vulnerability in multiple products
There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4.
network
low complexity
sam2p-project debian CWE-416
critical
9.8
2018-02-28 CVE-2018-7551 Use After Free vulnerability in multiple products
There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4.
network
low complexity
sam2p-project debian CWE-416
critical
9.8
2018-02-28 CVE-2018-6641 Use After Free vulnerability in Wiris Mathtype 6.9C
An Arbitrary Free (Remote Code Execution) issue was discovered in Design Science MathType 6.9c.
network
low complexity
wiris CWE-416
critical
9.8
2018-02-27 CVE-2017-18202 Use After Free vulnerability in Linux Kernel
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
local
high complexity
linux CWE-416
7.0