Export limit exceeded: 12177 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Results 12,177

Export CSV
CVE-2013-1307

Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-0811.

CVSS 2.0 · 9.3 Critical EPSS 20.6% KEV · Not listed
Vendors
CVE-2013-1308

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1309 and CVE-2013-2551.

CVSS 2.0 · 9.3 Critical EPSS 20.9% KEV · Not listed
Vendors
CVE-2013-1309

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-2551.

CVSS 2.0 · 9.3 Critical EPSS 39.1% KEV · Not listed
Vendors
CVE-2013-1310

Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 20.6% KEV · Not listed
Vendors
CVE-2013-1311

Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 20.7% KEV · Not listed
Vendors
CVE-2013-1312

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 20.6% KEV · Not listed
Vendors
CVE-2013-1340

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Dereference Vulnerability."

CVSS 3.1 · 8.4 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2011-1195

Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "document script lifetime handling."

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2013-1674

Mozilla: Use-after-free with video and onresize event (MFSA 2013-46)

Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.

CVSS 2.0 · 9.3 Critical EPSS 5.8% KEV · Not listed
Vendors
Products
CVE-2013-1722

Mozilla: Use-after-free in Animation Manager during stylesheet cloning (MFSA 2013-79)

Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving stylesheet cloning.

CVSS 2.0 · 9.3 Critical EPSS 5.7% KEV · Not listed
Vendors
Products
CVE-2013-2856

Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2013-2857

Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of images.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2013-2858

Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2013-2860

Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving access to a database API by a worker process.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2013-2871

webkitgtk: use-after-free vulnerability in the handling of input (WSA-2015-0001)

Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2013-2873

Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2013-2924

icu: use-after-free flaw leads to denial of service

Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2013-2927

webkitgtk: use-after-free in the HTMLFormElement::prepareForSubmission() (WSA-2015-0001)

Use-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to submission for FORM elements.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
CVE-2011-1148

php: use-after-free vulnerability in substr_replace()

Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.

CVSS 2.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
CVE-2011-1124

Use-after-free vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to blocked plug-ins.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Products