Vulnerabilities > Use After Free

DATE CVE VULNERABILITY TITLE RISK
2017-08-11 CVE-2017-11223 Use After Free vulnerability in Adobe products
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine.
network
low complexity
adobe CWE-416
8.8
2017-08-11 CVE-2017-11219 Use After Free vulnerability in Adobe products
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine.
network
low complexity
adobe CWE-416
8.8
2017-08-11 CVE-2017-11218 Use After Free vulnerability in Adobe products
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management.
network
low complexity
adobe CWE-416
8.8
2017-08-09 CVE-2017-0727 Use After Free vulnerability in Google Android
A elevation of privilege vulnerability in the Android media framework (libgui).
local
low complexity
google CWE-416
7.8
2017-08-07 CVE-2017-12671 Use After Free vulnerability in Imagemagick 7.0.63
In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service.
network
low complexity
imagemagick CWE-416
6.5
2017-08-07 CVE-2015-7849 Use After Free vulnerability in multiple products
Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
network
low complexity
ntp netapp CWE-416
8.8
2017-08-07 CVE-2017-6420 Use After Free vulnerability in Clamav 0.99.2
The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression.
local
low complexity
clamav CWE-416
5.5
2017-08-04 CVE-2017-12448 Use After Free vulnerability in GNU Binutils
The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file.
local
low complexity
gnu CWE-416
7.8
2017-08-04 CVE-2017-12431 Use After Free vulnerability in Imagemagick 7.0.61
In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service.
network
low complexity
imagemagick CWE-416
6.5
2017-07-26 CVE-2017-9612 Use After Free vulnerability in multiple products
The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document.
local
low complexity
artifex debian CWE-416
7.8