Lucene search
+L

667 matches found

CNNVD
CNNVD
added 2021/05/04 12:00 a.m.11 views

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system of the Google Open Handheld Consortium Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a memory corruption in the memory management driver due to reuse after release. An attacker...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/05/03 12:00 a.m.8 views

Qualcomm 组件 资源管理错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides functionality to Qualcomm devices. A resource management error vulnerability exists in FastRPC, which stems from a missing null check that can be used after release. The following products and...

8.4CVSS7.3AI score0.0016EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/05/03 12:00 a.m.11 views

Qualcomm Chipsets 资源管理错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. The intrinsic parts that provide the functionality of Qualcomm devices. A resource management error vulnerability exists in Qualcomm Chipsets, which stems from incorrect memory mapping for handling multiple processes at the same...

8.4CVSS7.7AI score0.01141EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.10 views

The vulnerability of the IndexedDB component in browsers such as Google Chrome and Microsoft Edge allows a hacker to gain unauthorized access to protected information.

The vulnerability of the IndexedDB component in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...

7.3CVSS7.6AI score0.00943EPSS
SaveExploits0References12Affected Software6
CNVD
CNVD
added 2021/04/16 12:00 a.m.14 views

Google Blink Resource Management Error Vulnerability

Blink is the U.S. Google Google Inc. and Norway's Opens opera Software company's set of browser layout engine rendering engine. Blink is vulnerable to a resource management error vulnerability that originates from use after release. No details of the vulnerability are available at this time...

8.8CVSS6.5AI score0.01754EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:00 a.m.29 views

Google Blink Resource Management Error Vulnerability

Blink is the U.S. Google Google Inc. and Norway's Opens opera Software company's set of browser layout engine rendering engine. Blink is vulnerable to a resource management error vulnerability that originates from use after release. No details of the vulnerability are available at this time...

8.8CVSS6.5AI score0.01555EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/14 12:00 a.m.15 views

Google Blink 资源管理错误漏洞

Blink is the U.S. Google Google Inc. and Norway's Opens opera Software company's set of browser layout engine rendering engine. Blink is vulnerable to a resource management error vulnerability that originates from use after release. No details of the vulnerability are available at this time...

8.8CVSS8.2AI score0.01555EPSS
SaveExploits0References16
CNVD
CNVD
added 2021/04/12 12:00 a.m.14 views

Mozilla Rust Post-Release Reuse and Double-Release Vulnerability

Rust is a systems programming language characterized by fast operation, the ability to prevent segmentation errors, and thread-safety. A reuse-after-release and double-release vulnerability exists in standard inventory in versions of Rust prior to 1.49.0. The vulnerability stems from...

9.8CVSS6.4AI score0.01676EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/04/11 12:00 a.m.7 views

Mozilla Rust 资源管理错误漏洞

Rust is a systems programming language characterized by fast operation, the ability to prevent segmentation errors, and thread-safety. A reuse-after-release and double-release vulnerability exists in standard inventory in versions of Rust prior to 1.49.0. The vulnerability stems from...

9.8CVSS5.7AI score0.01676EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the Audio component in the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Audio component in the Google Chrome browser is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially crafted web page...

8.8CVSS8.2AI score0.26525EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the WebRTC extension in the Google Chrome web browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebRTC extension in the Google Chrome web browser relates to its use after release. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

7.3CVSS7.6AI score0.01376EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.11 views

The vulnerability of the Bookmarks component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Bookmarks component in Google Chrome browser relates to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

7.3CVSS8AI score0.01376EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.10 views

The vulnerability of the Audio component in the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Audio component in the Google Chrome browser is related to its use after release. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.3CVSS7.6AI score0.0112EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/09 12:00 a.m.9 views

The vulnerability of the xps_finish_image_path() function (device/vector/gdevxps.c) in the software suite for processing, transforming, and generating Ghostscript documents allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xpsfinishimagepath function device/vector/gdevxps.c in the software suite for processing, transforming, and generating Ghostscript documents is related to its use after release. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

6.8CVSS7.1AI score0.01793EPSS
SaveExploits1References14Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.12 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is released. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

10CVSS7.7AI score0.04117EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/02/01 12:00 a.m.17 views

Linux kernel post-release reuse vulnerability (CNVD-2021-14804)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A kernel stack reuse after release vulnerability exists in PI futex in Linux kernel 5.10.11 and earlier versions duri...

7.8CVSS7.5AI score0.01377EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.9 views

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

10CVSS7.5AI score0.02851EPSS
SaveExploits0References18Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.11 views

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of after-freeing mechanisms, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the use of after-release components. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions using a specially created malware script...

10CVSS7.8AI score0.02756EPSS
SaveExploits1References18Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.11 views

The vulnerability in the input method editor (IME) editing methods of Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the input method editor IME editing tools in Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after event handling is released. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.3CVSS7.1AI score0.01971EPSS
SaveExploits0References16Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:00 a.m.14 views

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises relates to the use of exploits after release. This allows attackers to gain access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises, is related to the use of after-release components. Exploitation of this vulnerability can allow attackers to access protected...

7.8CVSS7.5AI score0.03461EPSS
SaveExploits0References2
Rows per page
Query Builder