Export limit exceeded: 10969 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Results 10,969

Export CSV
CVE-2010-4168

Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow (1) remote attackers to cause a denial of service (invalid write and daemon crash) by abruptly disconnecting during transmission of the map from the server, related to network/network_server.cpp; (2) remote attackers to cause a denial of service (invalid read and daemon crash) by abruptly disconnecting, related to network/network_server.cpp; and (3) remote servers to cause a denial of service (invalid read and application crash) by forcing a disconnection during the join process, related to network/network.cpp.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed
Products
CVE-2010-4169

kernel: perf bug

Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2010-4197

WebKit: Use-after-free vulnerabiity related to text editing causes memory corruption

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2010-4201

WebKit: Use-after-free vulnerability related to text control selections

Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text control selections.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2010-4204

WebKit: Use-after-free vulnerability related frame object

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2011-0055

Mozilla use-after-free error in JSON.stringify (MFSA2011-03)

Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to the js_HasOwnProperty function and garbage collection.

CVSS 2.0 · 10.0 Critical EPSS 7.2% KEV · Not listed
Vendors
CVE-2011-0057

Mozilla use-after-free error using Web Workers (MFSA 2011-06)

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection.

CVSS 2.0 · 10.0 Critical EPSS 4.7% KEV · Not listed
Vendors
CVE-2011-0065

Mozilla mChannel use after free (MFSA 2011-13)

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.

CVSS 2.0 · 10.0 Critical EPSS 74.4% KEV · Not listed
Vendors
CVE-2011-0066

Mozilla mObserverList use after free (MFSA 2011-13)

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mObserverList.

CVSS 2.0 · 10.0 Critical EPSS 4.9% KEV · Not listed
Vendors
CVE-2011-0072

Mozilla use after free flaw (MFSA 2011-12)

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0074, CVE-2011-0075, CVE-2011-0077, and CVE-2011-0078.

CVSS 2.0 · 10.0 Critical EPSS 5.4% KEV · Not listed
Vendors
Products
CVE-2011-0777

Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to image loading.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2011-0982

Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG font faces.

CVSS 2.0 · 10.0 Critical EPSS 2.6% KEV · Not listed
Vendors
Products
CVE-2011-1553

t1lib: Use-after-free via crafted Type 1 font

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.

CVSS 2.0 · 4.3 Medium EPSS 5.4% KEV · Not listed
Vendors
Products
CVE-2011-1808

Use-after-free vulnerability in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to incorrect integer calculations during float handling.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-1809

Use-after-free vulnerability in the accessibility feature in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-1818

Use-after-free vulnerability in the image loader in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-2346

Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG fonts.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-2349

Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text selection.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-2351

Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-2373

Mozilla Use-after-free vulnerability when viewing XUL document with script disabled (MFSA 2011-20)

Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.

CVSS 2.0 · 7.6 High EPSS 5.0% KEV · Not listed
Vendors
Products