Export limit exceeded: 10969 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Results 10,969

Export CSV
CVE-2010-2093

PHP: Context stream use-after-free on request shutdown (MOPS-2010-022)

Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Php
Products
Php
CVE-2010-2941

cups: cupsd memory corruption vulnerability

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.

CVSS 3.1 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
CVE-2010-3766

Mozilla use-after-free error with nsDOMAttribute MutationObserver (MFSA 2010-80)

Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.

CVSS 2.0 · 9.3 Critical EPSS 7.0% KEV · Not listed
Vendors
CVE-2010-4492

WebKit: Use-after-free vulnerability in SVG animations

Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animations.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2013-1309

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-2551.

CVSS 2.0 · 9.3 Critical EPSS 39.1% KEV · Not listed
Vendors
CVE-2013-1308

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1309 and CVE-2013-2551.

CVSS 2.0 · 9.3 Critical EPSS 20.9% KEV · Not listed
Vendors
CVE-2011-1809

Use-after-free vulnerability in the accessibility feature in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2010-4493

WebKit: Use-after-free vulnerability related to handling of mouse dragging events.

Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service via vectors related to the handling of mouse dragging events.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-1808

Use-after-free vulnerability in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to incorrect integer calculations during float handling.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-0055

Mozilla use-after-free error in JSON.stringify (MFSA2011-03)

Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to the js_HasOwnProperty function and garbage collection.

CVSS 2.0 · 10.0 Critical EPSS 7.2% KEV · Not listed
Vendors
CVE-2011-0057

Mozilla use-after-free error using Web Workers (MFSA 2011-06)

Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection.

CVSS 2.0 · 10.0 Critical EPSS 4.7% KEV · Not listed
Vendors
CVE-2011-0065

Mozilla mChannel use after free (MFSA 2011-13)

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.

CVSS 2.0 · 10.0 Critical EPSS 74.4% KEV · Not listed
Vendors
CVE-2011-0777

Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to image loading.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2011-0066

Mozilla mObserverList use after free (MFSA 2011-13)

Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mObserverList.

CVSS 2.0 · 10.0 Critical EPSS 4.9% KEV · Not listed
Vendors
CVE-2011-0671

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."

CVSS 3.1 · 8.4 High EPSS 1.3% KEV · Not listed
Vendors
CVE-2011-3075

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3076

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3077

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a "read-after-free" issue.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2011-3078

Webkitgtk: google chrome update [30-April-2012]

Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.

CVSS 2.0 · 6.8 Medium EPSS 2.2% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3081

Webkitgtk: google chrome update [30-April-2012]

Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.

CVSS 2.0 · 9.3 Critical EPSS 3.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more