CVE-2014-7936

chromium-browser: use-after-free in Views

Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that triggers improper maintenance of a zoom bubble.

CVSS 2.0 · 6.8 Medium EPSS 1.5% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2014-7937

chromium-browser: use-after-free in FFmpeg

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Ffmpeg Google Redhat

Products

Ffmpeg Chrome Rhel Extras

CVE-2014-8137

jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.

CVSS 2.0 · 6.8 Medium EPSS 14.5% KEV · Not listed

Vendors

Jasper Project Redhat

Products

Jasper Enterprise Linux Rhev Manager

CVE-2014-8142

php: use after free vulnerability in unserialize()

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.

CVSS 2.0 · 7.5 High EPSS 55.1% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Rhel Software Collections

CVE-2014-8641

Mozilla: Read-after-free in WebRTC (MFSA 2015-06)

Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data.

CVSS 2.0 · 7.5 High EPSS 4.2% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Firefox Esr Seamonkey and 1 more

CVE-2015-0361

kernel: xen crash due to use after free on hvm guest teardown (xsa116)

Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system crash) via a crafted hypercall during HVM guest teardown.

CVSS 2.0 · 7.8 High EPSS 2.5% KEV · Not listed

Vendors

Opensuse Xen

Products

Opensuse Xen

CVE-2015-0562

wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2015-0568

kernel: use-after-free in msm_set_crop function

Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2015-0831

Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.

CVSS 2.0 · 6.8 Medium EPSS 3.8% KEV · Not listed

Vendors

Canonical Mozilla Redhat

Products

Ubuntu Linux Firefox Firefox Esr and 2 more

CVE-2015-1209

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper handling of a shadow-root anchor.

CVSS 2.0 · 7.5 High EPSS 2.9% KEV · Not listed

Vendors

Apple Canonical Google and 4 more

Products

Macos Ubuntu Linux Chrome and 9 more

CVE-2015-1221

chromium-browser: Use-after-free in web databases

Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-1216

chromium-browser: Use-after-free in v8 bindings

Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more

CVE-2015-1218

chromium-browser: Use-after-free in dom

Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more

CVE-2015-1220

chromium-browser: Use-after-free in gif decoder

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more

CVE-2015-1222

chromium-browser: Use-after-free in service workers

Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cache_map.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a ServiceWorkerContextWrapper::DeleteAndStartOver call, related to the NotifyStartedCaching and NotifyFinishedCaching functions.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-1223

chromium-browser: Use-after-free in dom

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2015-1237

chromium-browser: Use-after-free in IPC

Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 1 more

CVE-2015-1243

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 5 more

CVE-2015-1245

chromium-browser: Use-after-free in PDFium

Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium "Open PDF in Reader" button that has an invalid tab association.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1251

chromium-browser: Use-after-free in Speech.

Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras